Privacy Policy

Who We Are

SHAKE International is operated by LEVIER (Pty) Ltd, based in South Africa ("SHAKE", "we", "us"). We are the responsible party (data controller) for personal information processed in connection with the SHAKE marketplace platform, as defined under the Protection of Personal Information Act, 2013 ("POPIA").

Contact: admin@levier.co.za

Information We Collect

Account information: Name, email address, password (stored as a secure hash), location (country, province, area), and account role (buyer or seller).

Seller information: Business trading name, VAT number, company registration number, contact details, and profile/banner photographs.

Listing data: Equipment descriptions, photographs, pricing, condition, specifications, and location — provided by sellers and displayed publicly.

Messages: The content of messages sent through the SHAKE platform between buyers and sellers. See Section 5 for how message content is processed.

Usage data: Pages visited, listings viewed, search queries, saved listings, device type, IP address, and browser type — collected automatically when you use the platform.

Payment data: Subscription plan records and payment history. We do not store card numbers — all card processing is handled by Paystack (Pty) Ltd, a PCI-DSS compliant payment processor.

How We Use Your Information

We use your personal information to:

• Create and manage your account and authenticate your identity
• Display listings and enable buyer–seller communication
• Process seller subscription payments via Paystack
• Send platform notifications, account updates, and (with your consent) marketing communications
• Automatically analyse message content using AI to detect potential sale completions and maintain listing accuracy (see Section 5)
• Detect and prevent fraud and abuse
• Improve the platform and produce anonymised market analytics
• Comply with our legal and regulatory obligations under South African law

Legal Basis for Processing (POPIA)

We process your personal information under POPIA on the following bases:

• Contractual necessity — to perform our contract with you (account management, subscriptions, connecting buyers and sellers)
• Legitimate interests — to maintain platform integrity, keep listings accurate, detect fraud, and operate a trustworthy marketplace (including AI message monitoring)
• Legal obligation — to comply with applicable South African legislation
• Consent — where specifically requested, for example marketing communications

Automated Message Processing — AI Sold Detection

By using the SHAKE messaging feature, you consent to the automated analysis of message content by artificial intelligence systems for the limited purposes described below.

SHAKE uses Anthropic's Claude AI model to automatically classify messages and determine whether a transaction has likely been completed. The analysis looks for signals such as agreed pricing, payment confirmation, or collection/delivery arrangements.

Important safeguards:

• Processing is fully automated — no human employee reads your private messages for this purpose
• When a potential sale is detected, the listing's seller receives a notification asking them to confirm or dismiss the flag
• No action is taken automatically without seller confirmation
• A sale flag is recorded against the listing record and retained for analytics
• Message content transmitted to Anthropic is subject to Anthropic's data processing terms and privacy policy

The legal basis for this processing is legitimate interests (POPIA) — specifically, the interest of all users in having an accurate, trustworthy marketplace free of stale "sold" listings. You have the right to object to this processing (see Section 9), but doing so means you cannot use the SHAKE messaging system.

Sharing Your Information

We share personal information only as necessary:

• Supabase Inc. (USA) — database, authentication, and file storage provider. Standard contractual clauses apply for cross-border transfer.
• Vercel Inc. (USA) — platform hosting and edge delivery. Standard contractual clauses apply.
• Paystack (Pty) Ltd (South Africa) — payment processing for seller subscriptions.
• Anthropic PBC (USA) — AI provider for automated message analysis. Message content is transmitted under Anthropic's enterprise data processing agreement.
• South African legal authorities — when required by court order, subpoena, or applicable law.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

Data Retention

• Active account data: retained for the duration of your account
• Listing data: retained indefinitely in anonymised form for market analytics, even after a listing is removed from public view
• Messages: retained for 24 months from the date sent
• Payment records: retained for 5 years as required by South African financial regulations
• Account data after deletion: anonymised and retained for aggregate analytics

Security

We implement appropriate technical and organisational security measures including encrypted connections (HTTPS/TLS), hashed password storage, role-based access controls, and regular security reviews. If you believe your account has been compromised, contact us immediately at admin@levier.co.za. No system is completely secure and we cannot guarantee absolute protection against all threats.

Your Rights Under POPIA

As a data subject, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete information
• Deletion — request deletion of your personal information, subject to legal retention obligations
• Objection — object to processing based on legitimate interests
• Restriction — request that we restrict processing in certain circumstances
• Portability — receive a copy of your data in a structured, machine-readable format

To exercise any right, email admin@levier.co.za. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Regulator (South Africa):
Website: inforegulator.org.za | Email: inforeg@justice.gov.za

Cookies

We use cookies and similar technologies for session authentication and usage analytics. Strictly necessary cookies (authentication) cannot be disabled without losing platform access. Analytics cookies can be disabled through your browser settings. We do not use cookies for third-party advertising.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users by email at least 14 days before they take effect. Continued use of the platform after the effective date constitutes acceptance of the updated Policy.

Contact

For privacy enquiries, data access requests, or to exercise your POPIA rights:

admin@levier.co.za
SHAKE International | LEVIER (Pty) Ltd | South Africa