Legal and Safety

Legal operator: AUTOMATIONFLOWLAB (PTY) LTD.

Company registration number: 2026/796103/07.

Country: South Africa.

Website: https://automationflowlab.com.

Contact: Automationflowlab.info@proton.me.

AutomationFlowLab provides professional business and technology services alongside self-service app tools.

These details identify the company operating the website, app and services.

No statement of tax registration, VAT registration, regulatory accreditation, security certification or vendor partnership is made unless separately verified and published.

AutomationFlowLab’s self-service app and tools are currently free to use.

In-app payments and paid app subscriptions are not active. Future app prices are not presently chargeable.

If paid app access becomes available, you will see the applicable terms and choose whether to accept before any charge begins. Free app use will not be billed retrospectively.

Professional services are separately quoted and charged under an accepted proposal or service agreement. Online payment functionality is not yet active.

Separately agreed professional work is governed by its accepted scope, fees, payment arrangements, client responsibilities, deliverables and support terms.

Professional-service pricing and quotation requests are separate from future app subscriptions.

Keep source records and independent backups.

Test workflows with non-sensitive sample data before production use. Check permissions, recipient lists, calculations and outputs.

Use approval steps for consequential changes, outbound communications and destructive actions.

Stop a workflow and disconnect affected integrations if it behaves unexpectedly.

AI output may be incomplete, inaccurate or biased. Review outputs against source evidence and obtain appropriate professional advice when necessary.

Do not use unsupported tools for medical, legal, credit, employment or other consequential automated determinations.

Professional-service engagements should define the appropriate testing, review and authorisation arrangements for the agreed work.

Never send passwords, API keys or access tokens in normal support messages.

Share only the minimum records needed for a request. Use redacted samples where possible.

For professional engagements, use the agreed channels for confidential information and authorised system access.

Third-party services may impose their own licensing, access, cost and privacy obligations.

A connector’s availability does not imply endorsement or partnership.

Send suspected vulnerabilities or account incidents to Automationflowlab.info@proton.me with “Security report” as the subject.

Describe the affected feature, timing and non-sensitive evidence.

Do not access other users’ data, run destructive tests or disclose exploitable details publicly.

Ask for a secure channel before sending sensitive evidence.

This contact is not an emergency service or an authorisation to test systems.

For a formal request for company records under South Africa’s Promotion of Access to Information Act, use the current prescribed Form 2 available from https://inforegulator.org.za/paia/.

Send it to our contact email marked “PAIA request” and identify the right you seek to exercise or protect and why the requested record is needed.

Requests are assessed under PAIA, including identity, authority, lawful refusal grounds and prescribed fees or exemptions.

We will explain applicable fees before requiring payment. PAIA fees, if lawfully applicable, are separate from app subscriptions and professional-service fees.

A decision is ordinarily required within 30 days of receipt of a valid request, subject to lawful extensions with notice.

If a request is refused or not answered within the applicable period, you may use the complaint procedure through the Information Regulator or seek appropriate court relief.

Private-body requests do not require a statutory internal appeal.

The company’s complete PAIA Manual must provide the required Information Officer and office contact details, records categories and request procedures.

Before processing personal information on a business customer’s behalf, the parties must establish the applicable processing instructions and written safeguards.

A Data Processing Agreement should identify purposes, duration, data categories, authorised providers, security requirements, incident reporting, rights assistance, international transfers and return or deletion arrangements.

Customer administrators must have lawful authority for records they submit and must define authorised users and workflow instructions.

For professional services, the agreed processing instructions must also cover relevant access to client systems, project data and deliverables.

We must not repurpose customer-directed records beyond authorised instructions except where law requires it.

The operational agreement must reflect the actual system and provider configuration.

Send service complaints to our contact email with relevant dates and the remedy requested.

Privacy complaints may also be sent directly to the Information Regulator at https://inforegulator.org.za.

Applicable consumer, privacy and access-to-information rights remain available.

Website policy wording does not replace these rights or the operational safeguards required by law.