InfoDot

Privacy Policy

Last updated: 6 August 2026

This Privacy Policy explains how BluePin Inc ("BluePin", "we", "us", "our"), the company responsible for InfoDot, collects, uses, stores, and shares personal information when you use InfoDot and any platform in the Dot Ecosystem that signs you in through InfoDot. It is written to align with South Africa's Protection of Personal Information Act 4 of 2013 ("POPIA").

1. Who we are

BluePin Inc is the responsible party for the personal information InfoDot processes. Our Information Officer can be reached at privacy@infodot.co.za for any question, request, or concern about your personal information.

2. What we collect

We collect the information you give us directly, and a small amount generated automatically by using the platform:

  • Account information — your name, email address, password (stored as a salted hash, never in plain text), and optionally a profile photo.
  • Team information — if you create or join a Team, the team's name and its membership list.
  • Content you post — Questions, Solutions, Steps, comments, and likes are public by design and are visible to every InfoDot user and, where a Solution or Question is shared, to visitors browsing that content.
  • Associates — your connections to other members, tracked in both directions (who you're connected to, and who is connected to you).
  • Files you upload — if your team uses InfoDot's file storage, the files and folders you or your teammates upload.
  • Technical information — IP address, browser and device information, and session activity, collected automatically for security and to keep you signed in.

3. Why we process your information

We process personal information to:

  • create and maintain your account, and authenticate you when you sign in;
  • let you sign in once and move between connected Dot Ecosystem platforms without re-entering your credentials (see "Ecosystem single sign-on" below);
  • operate the Questions, Solutions, comments, likes, Associates, and Teams features you choose to use;
  • keep InfoDot secure, prevent abuse, and enforce our Terms & Conditions;
  • respond when you contact us; and
  • meet our legal obligations.

4. Ecosystem single sign-on

When you use InfoDot to sign in to another Dot Ecosystem platform, InfoDot issues that platform a short-lived, single-use authentication token (valid for a few minutes, scoped to a single permission, and deleted immediately after use). This token lets the connected platform confirm who you are without you re-entering a password — it does not hand your password to the connected platform, and every connected platform is itself a Dot Ecosystem product bound by this same Privacy Policy.

5. Cookies

InfoDot uses a small number of strictly necessary cookies to keep you signed in and to protect your account and forms from cross-site attacks. See our Cookie Policy for the full list and what each one does.

6. How long we keep your information

We keep your account information for as long as your account is active. If you delete your account, we remove your personal account information; content you posted publicly (Questions, Solutions, comments) may be retained in de-identified or attributed-to-a-deleted-account form so that discussions other members relied on remain intact, unless you specifically ask us to remove individual posts as well.

7. How we protect your information

Passwords are hashed, never stored in plain text. Ecosystem sign-on tokens are short-lived and single-use. We apply reasonable technical and organisational security measures appropriate to the information we hold, and we expect the same of every platform in the Dot Ecosystem. No system is completely secure, and we can't guarantee absolute security.

8. Your rights under POPIA

As a data subject under POPIA, you have the right to:

  • ask us to confirm what personal information we hold about you, and to access it;
  • ask us to correct or delete personal information that is inaccurate, out of date, incomplete, misleading, or obtained unlawfully;
  • object, on reasonable grounds, to the processing of your personal information;
  • withdraw any consent you've given us, at any time, for a specific purpose;
  • ask us not to use your information for direct marketing; and
  • lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za if you believe we have processed your personal information unlawfully.

To exercise any of these rights, contact our Information Officer at privacy@infodot.co.za.

9. Children

InfoDot is not directed at children, and we do not knowingly collect personal information from children without the consent of a parent or guardian as required by POPIA. If you believe a child has provided us with personal information, please contact us and we will act promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. We'll change the "Last updated" date above when we do, and for material changes we'll take reasonable steps to let you know before they take effect.

11. Contact us

Questions about this Privacy Policy or how we handle your personal information can be sent to privacy@infodot.co.za, or via our Contact page.