Privacy and POPIA
Plain-language privacy.
Last updated 10 August 2026. This notice is written to be read, not skimmed past.
1. Who we are
Claripick Grants ("we", "us") provides grant management software for South African nonprofit organisations and grantmaking funds, available at claripick.com and app.claripick.com. For the purposes of the Protection of Personal Information Act 4 of 2013 (POPIA), your organisation is the responsible party for the information it stores in its workspace, and we act as its operator. For account information we collect directly, we are the responsible party.
2. Where your data lives
Workspace data (grants, deadlines, documents, funder and donor records) is stored in Google Cloud's Johannesburg region (africa-south1) in South Africa. Because the data does not leave the country, cross-border transfer restrictions under section 72 of POPIA do not arise for your primary data. Authentication is provided by a global identity service; by design it holds only your email address, while your name, phone number and preferences are stored in South Africa.
3. What we collect
Account information: name, email address and optional phone number. Workspace content: whatever your organisation chooses to store, such as grants, budgets, documents and contacts. Usage information: basic technical logs needed to keep the service secure and reliable. We do not sell personal information, and we do not use your workspace content for advertising.
4. Beneficiary information
Impact reporting works on aggregate numbers, for example counts of people reached by age band, which is what funders ask for. This design keeps special personal information and children's information, which POPIA protects most strictly, at your organisation rather than in the platform.
5. Messages we send
Deadline reminders and weekly digests carry titles, dates and links only, never financial figures or beneficiary details. Message delivery providers (for example our email service) act under written agreements and receive the minimum information needed to deliver the message. You control your channels and can switch reminders off at any time.
6. Your rights
You may request access to, correction of, or deletion of your personal information. Organisation administrators can export their full workspace or delete it entirely from within the product; deletion takes effect after a 30-day grace period. To exercise any right, email privacy@claripick.com. You may also lodge a complaint with the Information Regulator of South Africa.
7. Security
Data is encrypted in transit and at rest. Access is controlled per organisation and per role, every sensitive change is written to an audit trail your administrators can review, and payment approvals require two people. If a breach ever occurs that affects your information, we will notify the Information Regulator and affected users as section 22 of POPIA requires.
8. Contact
Information Officer, Claripick Grants: privacy@claripick.com. We will respond to any privacy request within a reasonable time, and in any event within the periods POPIA prescribes.