Draft—requires legal approval
Privacy and POPIA design
A product implementation summary pending Information Officer and attorney approval.
Purpose limitation
Every evidence session names the requester, property, tenancy purpose, source classes, recipients, freshness and retention class.
Security and abuse prevention
After the public-intake disclosure is acknowledged, hCaptcha may receive limited device, browser and network signals to distinguish a person from automated abuse. KhayaCheck retains only a generic challenge outcome and purpose-separated pseudonyms under short retention. These signals are not tenant evidence, do not contribute to the Tenant Risk Report and never make a letting decision.
Separation
KhayaCheck has its own identity, Supabase project, storage, keys and WABA. Liivra data and credentials do not silently transfer.
Model improvement
Training or model-improvement purpose is separate from the service. Provider data is never assumed reusable.