Privacy Policy
Plain language about what personal information jotli holds, why, where it lives, and the rights you have over it.
Last updated: 5 August 2026
Who we are
jotli is a product of Future Point Consult (Pty) Ltd, trading as “jotli” (“we”, “us”), Pretoria, South Africa. We provide inventory-control software for coffee shops and restaurants — stock counts, par levels, reorder sheets, goods received, repricing and checklists — at app.jotli.co. This policy is written for the Protection of Personal Information Act (POPIA).
Privacy questions, requests and complaints all go to hello@jotli.co.
Two kinds of personal information
Your account information — your name, email address and how you use the product. For this information we are the responsible party under POPIA.
Records your organisation stores — mostly business inventory data, but also the personal information that comes with running stores: team members' names and emails, supplier contact details, and who counted, received or signed off what. Your organisation decides why this information is collected; we process it only to run the product, acting as an operator under POPIA on your organisation's instructions. If your details appear in a business's jotli records and you want them corrected or removed, contact that business first — they own the relationship and the data. We will help them honour your request.
What we collect and why
We collect what you give us when you sign up and use the product (account details, the records your organisation enters), and technical information needed to keep the service working and safe: sign-in events, error reports, audit trails of critical changes, and rate-limiting counters. We rely on performing our contract with you for core processing, our legitimate interest in keeping the service secure, your consent where the law requires it, and legal obligations such as tax record-keeping.
If you request a walkthrough on our website, we collect your name, email address, business name and number of stores — used only to arrange that walkthrough, never added to a marketing list.
Website statistics. On our public website at jotli.co we measure how many people visit and which pages they read, using Vercel Web Analytics. It sets no cookies, follows nobody across other websites, and builds no profile of you: your IP address and browser details are hashed into a temporary daily identifier and the originals are discarded, so we only ever see counts. This runs on the public website only — it is not loaded once you sign in, so nothing you do inside the product is measured this way.
We do not sell personal information. We do not share it with anyone except the service providers listed below, and only so they can run the product for us.
Where your data lives
jotli runs on a small set of infrastructure providers. Some processing may happen outside South Africa; where it does, it happens under binding agreements that uphold a level of protection substantially similar to POPIA (section 72).
| Provider | What they do for us |
|---|---|
| Supabase | Database, authentication and file storage |
| Vercel | Application hosting, delivery and website visitor statistics |
| Resend | Transactional email (sign-in codes, walkthrough requests) |
We will update this list before adding or changing a provider.
How long we keep it
We keep your organisation's data for as long as you have an account. Finalised stock counts are immutable snapshots by design — that is the product working as intended, not a privacy choice. If you close your account, email us and we will export your organisation's data for you, then permanently delete it — except where the law requires us to keep specific records (for example, financial records for tax purposes).
Your rights
Under POPIA you may ask us what personal information we hold about you, ask for it to be corrected or deleted, object to processing, and complain to the Information Regulator of South Africa (inforegulator.org.za). POPIA protects juristic persons too, so these rights extend to your business's own information.
To exercise any of these, email hello@jotli.co. We respond within a month.
Security, children and changes
Your organisation's data is isolated per organisation and per store, enforced in the database itself; every change to critical records is audit-logged, and data is encrypted in transit and at rest by our infrastructure providers. jotli is a business tool and is not directed at children. If we change this policy in a way that matters, we will tell account owners by email before the change takes effect.