GoSaffa policy
Privacy notice
How GoSaffa handles information submitted through this storefront.
Last updated 30 August 2026Information we collect
We collect the contact, company, product, service and delivery information you choose to provide when creating an account or sending a request.
Why we use it
We use the information to respond, prepare quotations, provide requested services, keep appropriate business records and protect the platform.
Sharing and protection
Information is shared only with authorised staff and necessary service providers or supply partners for the relevant purpose, with access controls appropriate to the information.
AI-assisted sourcing
When you use Saffa, GoSaffa sends your message and relevant conversation and sourcing-brief context to the OpenAI Responses API to ask follow-up questions and prepare your brief. OpenAI and its subprocessors may process this content outside South Africa. OpenAI states that API inputs and outputs are not used to train or improve its models unless the API customer explicitly opts in.
OpenAI storage and retention
GoSaffa sends Saffa requests with store: false, which avoids normal Responses API application-state storage. This is not zero retention: OpenAI may retain customer content in abuse-monitoring logs for up to 30 days by default, and longer if required by law or reasonably necessary to protect its services or another person. Encrypted prompt representations may also be cached temporarily for up to 24 hours. OpenAI scans image and file inputs for potential child sexual abuse material and may retain a flagged item for manual review.
Product evidence in Saffa
If you attach a JPEG, PNG, WebP, PDF or DOCX, GoSaffa sends it in a separate OpenAI inspection request. A public product link may be inspected through OpenAI web search. Only a compact, policy-checked analysis with the reference name and type—not the raw file or full link URL—is passed into the main Saffa turn. Raw uploaded file bytes are transient and are not stored in GoSaffa’s Source operational record after inspection; GoSaffa stores the file name, type, size, content digest and analysis. For a link, GoSaffa stores the canonical URL and analysis. Evidence is treated as unverified context and does not prove supplier identity, availability, price, origin, certification, compliance, performance or delivery.
Evidence safety and retention
GoSaffa’s current admission checks confirm supported file type, bounded size and leading file signature only. They are not malware or active-content scanning and do not prove that a file is safe. Do not upload executable content or a file from an untrusted source. No proven automatic deletion or time-to-live currently applies to the evidence metadata and compact analysis stored by GoSaffa. Use the contact page to request deletion; any deletion is subject to applicable law and legal or operational retention duties.
Staging capacity
In staging, evidence inspections and Saffa chat turns share a global limit of 20 OpenAI attempts per UTC day and 10 attempts per browser sourcing session. Each attempt is reserved before the provider call, so failed or timed-out attempts consume capacity. Saffa may therefore be temporarily unavailable when either limit is reached.
Drafts and human review
Saffa and its evidence analysis help prepare an unverified draft sourcing brief. They do not make a binding automated commercial decision, approve a supplier, confirm availability or price, create an order or commit either party. The customer reviews the draft before submission, and GoSaffa staff review it before any commercial next step.
What not to share
Do not put contact details, payment or bank information, passwords or access tokens, identity documents, health information, or unnecessary personal, confidential or sensitive information in Saffa. Only upload a file or add a link when you are permitted to share it. Contact details requested after you approve a brief are collected separately and are not added to the Saffa conversation or sent to OpenAI.
Your privacy rights
Subject to applicable law, you may ask whether GoSaffa holds your personal information, request access, ask us to correct or delete it, object to certain processing, and complain to South Africa’s Information Regulator. Use the contact page to make a request. We may verify your identity, and legal or operational duties may still require us to retain some information.