1. Introduction

Welcome to Plentii, a platform that connects organisations and individuals for micro-volunteering opportunities. We respect your privacy and are committed to protecting your personal information in compliance with the Protection of Personal Information Act, 2013 ("POPIA") and other applicable laws.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our website (plentii.world) and related services.

2. Information We Collect

We may collect the following categories of information:

1. Personal Identification Information

• Name, surname, email address, phone number, or other contact information.

2. Volunteer Profile Information

• Skills, areas of interest, availability, and volunteering history.

3. Organisational Information

• Non-profit/organisation details, contact persons, and volunteer opportunity postings.

4. Technical Information

• IP address, browser type, operating system, and usage data through cookies or analytics tools.

5. Sensitive Information (only where strictly necessary and with your consent)

• For example, background checks if required by an organisation for child-related volunteering.

3. Calendar Service Integrations

Plentii integrates with third-party calendar and video conferencing services to schedule volunteer meetings. When you choose to connect a calendar service, the following applies:

a) Google Calendar

When you connect your Google account, Plentii may access the following Google user data:

• Calendar events: We read your calendar events to check availability and prevent double-booking of volunteer meetings.
• Profile information: We access basic profile information (name and email) to identify your account.
• Calendar event creation: We create calendar events for scheduled volunteer meetings, including Google Meet video conferencing links.

We access this data solely for the purpose of scheduling and managing volunteer meetings on your behalf. Your Google data is stored encrypted at rest using industry-standard encryption. We retain this data for as long as your account is active and your calendar remains connected. You may disconnect your Google Calendar at any time via your Settings page, which will revoke our access. You may also request deletion of your stored Google data by contacting us at privacy@plentii.world.

Plentii's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

b) Microsoft Outlook Calendar

When you connect your Microsoft account, Plentii may access the following data:

• Calendar events: We read your Outlook calendar events to check availability and prevent double-booking.
• Profile information: We access basic profile information (name and email) to identify your account.
• Calendar event creation: We create calendar events for scheduled volunteer meetings, including Microsoft Teams video conferencing links.

Your Microsoft data is stored encrypted at rest. We retain this data for as long as your account is active and your calendar remains connected. You may disconnect your Microsoft calendar at any time via your Settings page. Please note that when using Microsoft services, your data may be transferred and processed internationally in accordance with Microsoft's infrastructure. We ensure appropriate safeguards are in place for any such transfers.

c) Zoom

When you connect your Zoom account, Plentii may access the following data:

• User profile: We access basic Zoom profile information to identify your account.
• Meeting creation: We create Zoom meetings for scheduled volunteer sessions and generate video conferencing links.

Plentii does not store Zoom meeting recordings, chat messages, or meeting transcripts. Your Zoom OAuth tokens are stored encrypted at rest. You may disconnect your Zoom account at any time via your Settings page.

d) General Calendar Integration Practices

• Calendar data is only accessed on behalf of the authenticated user who connected the service.
• All OAuth tokens are stored encrypted at rest.
• You may disconnect or revoke access to any connected calendar service at any time through your account Settings page.
• Upon disconnection, we cease accessing your calendar data. You may request deletion of any previously stored calendar data by contacting privacy@plentii.world.
• In the event of a data breach affecting your calendar data, we will notify affected users promptly in accordance with applicable law.

4. How We Use Your Information

We process your information for the following purposes:

• To create and manage your account on Plentii.
• To match volunteers with relevant opportunities.
• To communicate with you about volunteering opportunities, platform updates, or legal notices.
• To verify your identity, where necessary.
• To comply with legal obligations.
• To improve our website, user experience, and platform functionality.

5. Legal Basis for Processing

Under POPIA, we rely on one or more of the following grounds to process your information:

• Your consent (e.g., when you sign up or agree to cookies).
• Contractual necessity (to provide you with our services).
• Legal obligations (e.g., verifying information when required by law).
• Legitimate interests (e.g., improving our platform and ensuring security).

6. Sharing of Information

We do not sell your personal data. We may share information with:

• Non-profit organisations or community groups where you express interest in volunteering.
• Service providers who support our operations (e.g., hosting, analytics, email services).
• Legal or regulatory authorities, where required by law.
• Successors/partners in the event of a merger, acquisition, or business transfer (subject to safeguards).

7. International Transfers

As Plentii uses third-party service providers, your information may be transferred and processed outside South Africa. Where this happens, we ensure appropriate safeguards are in place (e.g., contracts that ensure equivalent data protection).

8. Data Retention

We retain personal information only as long as necessary to:

• Provide services,
• Fulfil legal or regulatory requirements, and
• Resolve disputes or enforce agreements.

When data is no longer needed, it will be securely deleted or anonymised.

9. Your Rights

Under POPIA, you have the right to:

• Access the personal information we hold about you.
• Correct or update your information.
• Withdraw consent at any time (this may affect your ability to use some services).
• Object to processing in certain cases.
• Request deletion of your information, where legally permissible.

Requests may be submitted to: privacy@plentii.world

10. Security Measures

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure. However, no online service can be completely secure, and you use the platform at your own risk.

11. Children's Privacy

Plentii is not directed at children under 18, except in supervised volunteering programmes with parental/guardian consent. We do not knowingly collect information from minors without proper consent.

12. Cookies and Tracking

Our website uses cookies and similar technologies to:

• Keep you signed in,
• Understand how you use the platform, and
• Improve site performance.

You can control cookies through your browser settings.

13. Changes to this Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website with the effective date updated.

14. Contact Us

If you have questions or complaints regarding this Privacy Policy or our handling of your data, please contact us at:

Email: privacy@plentii.world

Address: South Africa

If unresolved, you may lodge a complaint with the Information Regulator (South Africa):

• Website: https://www.justice.gov.za/inforeg/
• Email: inforeg@justice.gov.za