Privacy Policy

• Account information — your name, email address and password (stored hashed) when you sign up.
• Brand & content inputs — your business details, website URL, uploaded images, brand voice and the content you create, approve or edit in Volka.
• Connected accounts — when you connect a social profile (e.g. Instagram, Facebook, LinkedIn), we store the access tokens needed to publish on your behalf. We never post without your approval.
• Usage & performance data — how you use the product and how published posts perform (e.g. saves, comments, clicks), which feeds the learning loop that improves your strategy.
• Billing information — handled by our payment processor; we do not store full card numbers.

• To generate, schedule and publish on-brand marketing content for you.
• To learn what performs and retune your strategy over time (the learning loop).
• To operate, secure, support and improve the service.
• To communicate with you about your account, billing and product updates.

We do not sell your personal information, and we do not use your private brand content to train third-party foundation models.

We share information with vetted providers strictly to run the service:

• Supabase — database, authentication and file storage.
• Vercel — application hosting and delivery.
• AI model providers (via Vercel AI Gateway) — to generate text, images and video from your prompts and brand inputs.
• Brevo — transactional and account emails.
• Paystack — payment processing.
• Publishing partners — to deliver approved posts to your connected social accounts.

We keep your information for as long as your account is active. If you close your account, we delete or anonymise your personal information within a reasonable period, except where we must retain it to meet legal, accounting or security obligations.

Under POPIA you may request access to, correction of, or deletion of your personal information, and you may object to certain processing. To exercise any of these rights, contact us using the details below and we will respond within a reasonable time.

We use industry-standard measures — encryption in transit, access controls and reputable infrastructure providers — to protect your information. No system is perfectly secure, but we work to safeguard your data and to notify you of any material breach as required by law.

Some of our providers process data outside South Africa. Where this happens, we rely on providers that offer protections consistent with POPIA for cross-border transfers.

Questions about this policy or your data? Contact High Risers (Pty) Ltd at hello@volka.co.za, or via our contact form.