Privacy Policy
1. Who is responsible
Zelar Solutions (“Zelar”, “we”) is the responsible party for personal information collected through Cutra at cutra.co.za. Our Information Officer can be reached at hello@zelar.co.za.
For the information about your own customers that you enter into Cutra (for example a client’s name and email on a job, quote or invoice), you are the responsible party and we act as your operator, processing it only on your instructions to provide the Service.
2. What we collect
| Category | Examples | Why |
|---|---|---|
| Account details | Company name, your name, email address, phone number, password (stored as a one-way hash, never in plain text) | Create and secure your account, contact you, provide support |
| Your business data | Jobs, cabinet and room designs, parts and cutting lists, materials, price books, unit formulas, quotes, invoices, payments you record, client names and email addresses you enter | Provide the Service you asked for |
| Billing information | Plan, subscription status, payment reference, last four card digits and card type as reported by our payment provider | Bill you, activate and manage your licence |
| Technical data | IP address, browser type, timestamps, error logs | Security, fraud prevention, fixing faults |
| AI render requests | The 3D image and text prompt you submit when you use the AI render feature | Generate the render you requested |
We do not collect or store your full card number or CVV. Card details are entered on, and processed by, Paystack.
3. How we use it
- To provide, secure, maintain and support the Service;
- to process payments, send invoices and receipts, and manage your subscription;
- to send service messages such as account, security, trial-expiry and billing notices;
- to improve reliability and fix problems; and
- to comply with law and to establish, exercise or defend legal claims.
We do not sell personal information, and we do not use Your Data for advertising.
4. Who we share it with
We share information only with service providers that help us run Cutra, under appropriate obligations of confidentiality and security:
- Paystack — payment processing and recurring card billing.
- Hetzner — the data-centre provider that hosts our servers and database.
- Stability AI — receives the image and prompt you submit when you use the AI render feature, solely to generate your render.
- Email delivery providers — to send account and service emails.
- Google Fonts — the public website loads fonts from Google, which may receive your IP address when the page loads.
We may also disclose information when required by law, a court order, or to protect our rights, users or the public. If our business is sold or reorganised, information may transfer to the new owner on the same terms as this policy.
5. Where it is stored (cross-border transfers)
Our servers are hosted by Hetzner. Some of our service providers (such as Paystack and Stability AI) process information in other countries. Where information leaves South Africa we take reasonable steps to ensure it is protected to a standard comparable to POPIA.
6. Cookies and local storage
The Cutra web app uses your browser’s local storage to keep you signed in and to remember interface preferences and unsaved drafts. These are essential to the Service. We do not use advertising or cross-site tracking cookies.
7. Security and retention
We use access controls, encrypted connections (HTTPS), hashed passwords and regular backups to protect information. No system is perfectly secure, and we will notify you and the Information Regulator where required if a breach affects your personal information.
We keep account and business data while your account is active. If you ask us to delete your account, we delete or anonymise Your Data within a reasonable period, except where we must keep certain records (for example invoices and payment records) for tax, accounting or legal reasons. Routine backups are overwritten on a rolling basis.
8. Your rights
Under POPIA you may ask us to confirm whether we hold personal information about you, to access it, to correct or delete it, to object to its processing, and to withdraw consent where processing is based on consent. Email hello@zelar.co.za and we will respond within a reasonable time. We may need to verify your identity first.
If you are unhappy with how we handle your information, you have the right to complain to the Information Regulator (South Africa): inforegulator.org.za.
9. Children
Cutra is a business tool and is not intended for people under 18. We do not knowingly collect information from children.
10. Changes to this policy
We may update this policy and will post the new version here with a new effective date. For material changes we will also notify you by email or in the app.
11. Contact
Privacy questions or requests: hello@zelar.co.za