Privacy policy (POPIA)

MAIZU (Pty) Ltd (Reg. No. 2026/446651/07), 12 Main Road, Empangeni, 3880, KwaZulu-Natal, South Africa. Information Officer: Sinethemba Matsengwane (Director), support@maizu.co.za.

Account details (name, email), delivery addresses and phone numbers you give us, order and message history, and basic device and security logs.

For sellers: store details, the bank name and last four digits of the payout account, and how they chose to be paid. Full bank details and ID numbers are sent directly to TradeSafe and are not stored by MAIZU.

Only when you tap "Use my location". To show kitchens near you, MAIZU uses your location rounded to about a kilometre and does not save it; your browser may remember it on your own device.

When you pin your door at checkout, that exact point is saved on the order and shown only to that order's seller or kitchen, so whoever delivers can find you. It is erased 30 days after the order is finished. Kitchens pin where they cook; buyers only ever see the distance, never the kitchen's exact point.

The pinning map comes from OpenStreetMap. Showing the map loads map pictures from OpenStreetMap, and if you search for a street, the words you type are sent to OpenStreetMap's search to find it. Your pin itself is not sent to OpenStreetMap.

To run your account, process orders, deliver items, prevent fraud and off-platform payments, resolve issues and meet legal obligations. We do not sell personal information.

Every night MAIZU's models look at each store's own record (its MAIZU orders, the sales and expenses the seller records, and the cash on hand they enter) to estimate the store's sales for the next 4 weeks, its cash outlook, its regular bills and a business-health score. Only the store's own team sees these; a seller can share the sales estimate with a funder through their Business Passport.

The models read numbers and dates only: no names, phone numbers, addresses, messages or notes. Buyers appear to them only as a scrambled code that can't be turned back into a person. The same models give MAIZU's team a second opinion on unusual store activity. That score is never shown to sellers, never decides anything on its own and never stops a payment: a person always looks first.

The seller of your order (name, delivery address and phone, and for kitchen deliveries the location you shared, for delivery only); TradeSafe (to process and hold payments); our hosting and email providers (Supabase, Railway, Vercel, Resend), under written agreements. Some providers may process data outside South Africa with adequate safeguards as POPIA requires.

When you follow a store, its team sees your first name and surname initial (or the display name you chose), when you followed, and your own store if you run one. When you review an order, your first name and review appear on the store's page and on the products you bought. Other buyers never see who follows a store.

Passwords are handled by our authentication provider and never stored by MAIZU. Access to data is controlled by database-level security rules, and money-related records cannot be changed by users.

You may ask to access, correct or delete your personal information, or object to processing. Email support@maizu.co.za. You may also complain to the Information Regulator (inforegulator.org.za).

Order and payment records are kept for at least five years for tax and dispute purposes. Other data is deleted or de-identified when no longer needed.