Privacy Policy | MartialQA
Legal

Privacy Policy

MartialQA is committed to safeguarding your privacy and the privacy of your employees. This Privacy Policy outlines how we handle your data and the rights you have regarding your personal information when using our services.

Last updated: August 2026

On this page

This Privacy Policy explains what personal information MartialQA collects, why, and the rights you have over it. It should be read alongside our Terms of Service and, where MartialQA processes data on behalf of a customer, our Data Processing Addendum.

1. Who we are

MartialQA is operated by Limuda Solutions (Registration No. 2024/433111/07), trading as MartialQA ("MartialQA", "we", "us"), of The Colosseum, Foyer 3, 1st Floor, Century Way, Century City, Cape Town, 7441, South Africa.

We play two different roles under data protection law, and this policy is written with that distinction in mind:

Responsible party (controller)

For your own account, business-contact, billing, sales and website information (for example when you sign up, request a demo, or browse our site), MartialQA decides why and how that information is processed, and this policy sets out our practices directly.

Operator (processor)

For the calls, chats, emails, recordings, transcripts and other customer content our customers submit for quality assurance, MartialQA processes that information only on the instructions of the customer who submitted it. If you are the customer or employee of a MartialQA customer and have a question about that data, please contact them directly: they control that information, and we process it on their behalf under our Data Processing Addendum.

2. Information we collect

We collect and process the following types of information:

Account information

When you or your organisation sign up for MartialQA, we collect information such as name, business email address, phone number, job title, organisation name, workspace membership, user role, and authentication and account information. We collect this as the responsible party.

Customer content

As part of our quality assurance services, our customers submit calls and recordings, chats, emails, conversation transcripts, information about their own customers and end users, knowledge-base material, ticket metadata and associated identifiers. We process this as an operator, on our customer's instructions.

Employee and agent information

Our customers may provide us with information about their employees and agents, such as names and identifiers, QA scores and scorecard results, coaching information, performance-related information, dispute and review information, and conversation metadata, to facilitate our AI-driven insights and rating features. We process this as an operator, on our customer's instructions.

Technical and security information

We automatically collect information when you access our services, including IP address, browser and device information, authentication events, access logs, application events and security telemetry. This is done to operate, secure and improve our platform.

Website information

We use Google Analytics on our public website to understand how visitors use it. This can involve information such as device and browser information, website interactions, approximate location information, and cookies or similar technologies. See section 8 for more on cookies.

Payment information

Customers can sign up for MartialQA directly, and payment for self-service subscriptions is processed by our payment provider, Paystack. Card and payment details are provided directly to Paystack; MartialQA does not store complete payment-card details. We hold billing contact details and transaction records necessary for invoicing and accounting.

3. Use of personal information

MartialQA uses the information we collect to:

Create and administer accounts and workspaces, and provide the MartialQA service.
Import and store conversations, transcribe them, and run AI-assisted quality assurance scoring, reporting and coaching.
Provide customer support, and communicate with you about updates, new features and service-related information.
Manage billing and subscriptions, including processing payments through Paystack.
Secure the service, prevent abuse and fraud, and maintain audit and security logs.
Understand how our public website is used, so we can improve it.
Comply with legal obligations and regulatory requirements.

We do not sell, rent, or trade your personal information to third parties. We may, however, disclose your data when required by law or in response to legal processes, including subpoenas or court orders.

We do not use your conversations or your employees' data to train machine-learning models, and our AI providers are contractually barred from doing so. How AI is used, and the limits we place on it, are set out on our Responsible AI page.

4. Data storage and security

MartialQA stores the personal information you provide on secure, encrypted servers hosted with our cloud provider in the European Union. We use TLS to protect your data in transit and AES-256 encryption at rest.

As part of our commitment to data privacy, we use established AI providers to process and analyse conversations for AI-driven insights and quality assurance. This processing is subject to our contractual, privacy and security controls and the data protection laws applicable to MartialQA and the relevant processing activity. Each provider is listed on our Subprocessors page.

Our full security programme, including tenant separation, access controls, monitoring, backups, penetration testing and incident response, is described on our Security page.

5. International data transfers

Where MartialQA or a subprocessor transfers personal information outside South Africa or the European Union, for example to an AI provider processing in the United States as disclosed on our Subprocessors page, we require that the recipient is subject to a written agreement providing an adequate level of protection consistent with section 72 of POPIA and, where the GDPR applies, an approved transfer mechanism such as Standard Contractual Clauses.

6. Data retention

We retain information only for as long as necessary for the purpose it was collected, and retention differs by category:

Active customer content is retained for the life of the customer's contract, on the retention settings that customer configures.
On account termination, customer content is purged from production within 30 days.
Account and business records (billing, invoices, sales and support correspondence) are kept for as long as needed for our own business or legal purposes, including tax law.
Security and audit logs are kept for 30 to 90 days for operational logs, and a minimum of 12 months for security audit events.
Backups are retained for 30 days on a rolling basis and then age out; a restore does not resurrect data deleted before the backup was taken.
Free QA audit samples are deleted from our systems within 14 days of the audit report being delivered.

Once information is no longer needed for these purposes, we securely delete or anonymise it.

7. Your rights and choices

You have the right to:

Access the personal information we hold about you.
Request corrections to any inaccurate or incomplete data.
Request the deletion of your personal information, subject to legal or contractual obligations.
Withdraw consent for data processing, where applicable.
Lodge a complaint with the Information Regulator of South Africa if you believe we have processed your personal information unlawfully.

To exercise any of these rights, please contact us using the details in section 11. Where we process personal information on behalf of a customer, we will refer the request to that customer and assist them in responding.

8. Cookies and tracking technologies

MartialQA uses cookies and similar technologies on our website. Cookies are small files stored on your device that help us remember your preferences and understand how our site is used.

We use Google Analytics to measure website traffic and usage patterns. This involves collecting information such as device, browser and usage data, which may constitute personal information under POPIA and the GDPR. We do not currently operate a cookie consent banner; we are working on adding cookie preference controls.

You can control cookies through your browser settings. Please note that blocking or deleting cookies may affect the functionality of the MartialQA platform.

9. Third-party services

MartialQA integrates with third-party services to provide additional functionality, such as data storage, AI processing and customer support. Every provider that processes data on our behalf is named on our Subprocessors page, together with what it does, the data involved and where it processes it. These providers have their own privacy policies, which we link from that page, and we encourage you to review them.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we make material changes, we will notify you via email or other communication channels. Please review this policy regularly to stay informed about how we protect your personal information.

11. Contact us and complaints

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at info@martialqa.co.za.

Our Information Officer is Darren Swartz, who can be reached at security@martialqa.co.za.

Thank you for trusting MartialQA with your business and employee data. We are dedicated to ensuring the highest standards of privacy and security.

POPIA → Security → Responsible AI → Subprocessors → Data Processing Addendum →