Skip to content
Sign inStart a project+
The posts of an unfinished dock in a misty sea
Your whole company, one truth
A person walking out along a spit of land into the sea
Inside the OS

Updated 13 October 2026

Privacy

What Superposition OS keeps about the people who use it, why, where, and who to ask.

Who we are

Superposition OS is run by Superposition (Pty) Ltd., a South African company. We're the responsible party, under the Protection of Personal Information Act (POPIA), for the personal information on this page.

What we keep

  • Your account: your email address, the brands you're on and your licence on each. Your organisation or our studio adds you, or you make one by signing in with Google or with a password on an address you've confirmed.
  • Your sign-in, with our sign-in service: your password, if you set one, and if you sign in with Google, the name, email address, profile picture and account ID it shares.
  • If you sign in and aren't on a brand yet: which brands we asked to give you access, and when.
  • Sign-ins: when you signed in, and the IP address and browser you used, to keep accounts secure.
  • What you do here: the changes you make to a brand, what you send for approval, approve or ask changes on, the files you upload, and the AI tools you connect and what they ask for. A brand's history shows who did what.
  • Cookies: one keeps you signed in. Signing in with Google keeps a short note in your browser for the trip there and back. There are no advertising or analytics cookies.
  • If you write to us through the contact form: your name, email address, organisation, phone number if you give it, the tier you ask about and your message. They reach us as an email. Your IP address is held for an hour, to stop the form being misused, and isn't stored.

What we use it for

  • To sign you in and show you the brands you're on, as your licence allows.
  • To record who changed and approved what: a brand's approvals depend on it.
  • To email you codes: to confirm your email address, and to reset your password.
  • If you sign in and aren't on a brand yet, to ask for you: we email your address to the brand champions of the brands whose people share your email address's domain (never a public one, such as gmail.com), so they can add you. With nobody to ask, the contact form starts with your address.
  • To answer you, if you write to us through the contact form.
  • To keep Superposition OS secure and working, and to meet the law.

We don't sell your personal information, use it for advertising, or use it to train AI models.

Who else handles it

These providers run Superposition OS for us:

  • Code Capsules: the servers, database and file storage Superposition OS runs on, and its sign-in service (Appstrax), in Cape Town.
  • Google Workspace: sends our emails, and holds the enquiries you send us.

And these, depending on what you use:

  • Google, if you sign in with it. Your account there is Google's, under its privacy policy.
  • Adobe Fonts and Google Fonts, which serve the fonts on some pages: your browser asks them for the fonts, which tells them your IP address and browser.
  • The AI tools you connect, such as Claude: they get the brand content they ask for, under their own terms.

We share personal information with anyone else only when the law requires it.

Where it's kept

In South Africa: Superposition OS and its sign-in service run in Cape Town. The emails we send, and the enquiries you send us, are with Google Workspace, under Google's data processing terms.

How long we keep it

We keep your account while you have access to a brand, and delete it when you ask. A brand's history (who changed or approved what) stays with that brand while it's on Superposition OS. Sign-in records and server logs are kept only as long as we need them to keep Superposition OS secure. We keep an enquiry for as long as we need it to answer you and for our business records, and delete it when you ask.

How we protect it

Every connection is encrypted. Each person reaches only the brands they're on: every request is checked against their licence. Your password goes from your browser straight to our sign-in service, which keeps it; Superposition OS's own servers never see it. You can sign in with Google instead.

Signing in with Google

When you sign in with Google, our sign-in service receives your name, email address, profile picture and Google account ID, and Superposition OS keeps your email address. We use them to sign you in; if you aren't on a brand yet, to ask your organisation's brand champions to add you (they get your email address) or to fill in the contact form for you. We don't see your email, files or anything else in your Google account, and we share Google user data with nobody else but the providers above that run Superposition OS.

Your rights

You can ask what personal information we hold about you, and ask us to correct it, delete it or stop using it. Email privacy@thesuperposition.agency and we'll answer within 30 days. If you're not satisfied, you can complain to South Africa's Information Regulator at inforegulator.org.za.

Changes

When this changes, we'll update this page and its date.