← Back to Home

Privacy Policy

Effective date: 3 March 2026

1. Who We Are

Cornerstone AI (Pty) Ltd ("Cornerstone AI", "we", "us", or "our") is an operations automation company based in South Africa. We help founder-led businesses automate acquisition, service delivery, and operational visibility.

Contact email: [email protected]

2. Information We Collect

When you submit our discovery form, we collect the following personal information:

  • Full name
  • Role or job title
  • Email address
  • Phone number
  • Company name
  • Company website
  • Team size
  • Description of your operational pain points
  • Any additional information you choose to provide

3. How We Collect Your Information

We collect personal information directly from you when you voluntarily submit it through our website's discovery form. We do not collect personal information through any other means on this website.

4. Purpose of Processing

We process your personal information for the following purposes:

  • To respond to your business enquiry
  • To assess your operational needs and provide a relevant quote
  • To schedule and conduct your discovery session
  • To deliver our automation and consulting services
  • To follow up on your enquiry if you have expressed interest

5. Lawful Basis for Processing

Under the Protection of Personal Information Act, 2013 (POPIA), we process your personal information on the following grounds:

  • Consent: By submitting the discovery form, you consent to the collection and processing of your personal information for the purposes stated above.
  • Legitimate interest: Following up on business enquiries and providing relevant services to prospective clients.

6. Third-Party Processors

We use the following third-party services to process your information:

  • Make.com — Form data is routed through Make.com for workflow automation and processing of your discovery submission.
  • Cloudflare (Turnstile) — We use Cloudflare Turnstile to protect our form from spam and abuse. Cloudflare may process limited technical data (such as browser metadata) for security verification purposes.

These services act as processors on our behalf and are bound by their own privacy and data protection policies.

7. Cross-Border Data Transfers

Your personal information may be processed outside of South Africa by our third-party service providers (Make.com and Cloudflare). These providers maintain their own data protection safeguards. By submitting the discovery form, you acknowledge and consent to this transfer. We take reasonable steps to ensure that your information remains protected in accordance with POPIA.

8. Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected. Specifically:

  • Active client data is retained for the duration of our engagement and a reasonable period thereafter.
  • Enquiry data from prospects who do not become clients is retained for up to 12 months, after which it is deleted unless you request earlier removal.

9. Your Rights Under POPIA

As a data subject, you have the right to:

  • Access the personal information we hold about you
  • Correct any inaccurate or incomplete information
  • Request deletion of your personal information
  • Object to the processing of your personal information
  • Withdraw consent at any time (this does not affect the lawfulness of processing prior to withdrawal)
  • Lodge a complaint with the Information Regulator if you believe your rights have been infringed

To exercise any of these rights, contact us at [email protected].

10. Security Measures

We take the security of your personal information seriously and implement the following safeguards:

  • All data is transmitted over HTTPS (encrypted in transit)
  • Cloudflare Turnstile CAPTCHA protects form submissions from automated abuse
  • Access to personal information is restricted to authorised personnel only

11. Cookies

This website does not use tracking cookies or analytics cookies. However, Cloudflare Turnstile (our CAPTCHA service) may set functional cookies necessary for its security verification process. These cookies are essential for the operation of the form and are not used for advertising or tracking purposes.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Continued use of the website after changes constitutes acceptance of the revised policy.

13. Information Officer

Cornerstone AI's designated Information Officer can be reached at:

Email: [email protected]

14. Information Regulator (South Africa)

If you are not satisfied with how we handle your personal information, you have the right to lodge a complaint with the Information Regulator:

Email: [email protected]