Privacy Policy

Last updated: 8 October 2026

1. Overview

Palmarius Technologies (Pty) Ltd ("Palmarius", "we", "us", "our") operates Systrantic (the "Service"), including the website at https://systrantic.com and the application at https://app.systrantic.com.

This policy explains what personal information we collect, why we use it, who we share it with, how long we keep it, and the rights you have. Palmarius is in South Africa, so this policy is written first for the Protection of Personal Information Act, 2013 (POPIA). If you use the Service from another country, other laws may also apply. Section 12 covers those.

The Service is not aimed at people in South Africa. We still protect personal information of whoever uses it, wherever they are. Our Terms of Use and risk disclaimer explain what the Service is.

2. Who is responsible

For POPIA, the responsible party, and for other privacy laws the controller, is:

Palmarius Technologies (Pty) Ltd
Cape Town, South Africa
https://systrantic.com

Privacy requests (subject line "Privacy request"): hello@systrantic.com. That address reaches our Information Officer.

Support, including billing: support@systrantic.com.

We have not appointed a representative in the European Union or the United Kingdom. You can use the email above from any country.

3. What we collect

3.1 Email

We collect your email address when you ask to hear from us, create an account, or contact us. We use it to email you about Systrantic, including access, your account, and other messages about the product. You can unsubscribe from messages that are not required to run your account. Email is sent through an email provider.

3.2 Account

First name, last name, and email address
Sign-in data, including a password handled by our authentication provider (we do not store your password in plain text), session tokens, and email-verification status
Account settings, such as your theme preference

3.3 Purchases

The plan you choose, the term, the amount, the currency, and the purchase status
A payment reference from our payment provider, and the payer email that provider returns to us

You enter payment credentials on our payment provider's pages. We do not receive or store your full card number or card security code.

3.4 Technical data

IP address, browser type, device type, and the date and time of a request
Log and error data needed to run and protect the Service
A general location derived from the IP address, such as country
Usage data on the marketing website from Google Analytics, such as pages viewed and whether you join the waitlist

3.5 Messages

If you email us, we keep the message and the related metadata so we can reply and keep a record of the conversation.

4. What we do not collect

We do not ask for brokerage logins, bank logins, account numbers, or details of the trades you place at your own broker. The orders you can read in the Service are our research records, not a record of your personal trading.

We do not collect special personal information such as health, biometric, or religious information. We do not sell personal information. We do not use advertising cookies or cross-site advertising profiles.

5. How we use information

We use personal information to:

email you about Systrantic, including access, your account, and the product;
create and secure your account and authenticate you;
provide the research you are entitled to see;
take payment, record purchases, and provide support;
send service messages, such as receipts, security alerts, and changes to the Terms;
detect abuse, fraud, and security incidents;
comply with law, including tax and accounting duties;
understand, in aggregate, how the Service is used so we can maintain it.

We do not use your information to profile you for advertising. You can opt out of emails that are not required to operate your account, using the unsubscribe link or by emailing us.

6. Lawful grounds

Depending on the activity, we rely on:

Contract: to provide the account, access, and purchases you ask for.
Legitimate interests: to secure the Service, prevent abuse, keep service records, and understand reliability and usage, balanced against your rights.
Legal obligation: where tax, accounting, or another law requires us to keep a record.
Consent: when you give us your email so we can write to you. You may withdraw consent at any time. Withdrawal does not affect processing that was already lawful, or emails we must send to operate your account.

Those grounds are the POPIA justifications we use, and the equivalent bases under the GDPR and UK GDPR where those laws apply.

7. Who we share information with

We share personal information with third parties only as needed to run the Service. Those third parties include service providers for hosting, sign-in, payment, email, and website analytics (Google Analytics), and a font provider that your browser contacts when the marketing website loads typefaces.

We also share personal information with:

Professional advisers, such as lawyers and accountants, under a duty of confidence.
Authorities, when the law requires it or when we need to protect rights, safety, or security.

Service providers may process information only for the purpose we give them, unless they are independent controllers of their own service. A payment provider is a controller of the payment data it collects on its own pages. We do not authorise providers to use your information for their own marketing.

If Palmarius is involved in a merger, acquisition, or sale of the business, personal information may transfer with that transaction, subject to this policy or an equivalent protection. We will tell you if that happens where the law requires notice.

8. International transfers

Palmarius is in South Africa. Our service providers may process personal information in the European Union, the United States, and other countries.

Where POPIA requires it, we transfer personal information across a border only as section 72 allows, including where the recipient is subject to a law, binding corporate rules, or a contract that provides protection comparable to POPIA, or where you have consented, or where the transfer is necessary to perform the contract with you. Where the GDPR or UK GDPR applies, we use an appropriate safeguard, such as the European Commission's standard contractual clauses or the UK addendum, when a transfer needs one.

9. Security

We use measures designed to protect personal information, including encryption in transit (HTTPS), access control, and separate handling of payment credentials by our payment provider. Passwords are held by the authentication provider, not in our application database in plain text.

No method of transmission or storage is completely secure. You are responsible for keeping your password confidential and for the device you use.

10. Retention

We keep personal information only for as long as we need it for the purposes in this policy, unless a longer period is required or allowed by law.

Email address: while we use it to email you or your account is open, and after that until you unsubscribe or ask us to delete it, unless we must keep it with an account or purchase record.
Account data: while the account is open, and for a limited period afterwards so we can finish deletion, resolve a dispute, or meet a legal hold.
Purchase records: for the period tax and accounting law requires, even if you close the account. We minimise or remove direct identifiers when we can still meet that duty.
Security logs: for a shorter operational period, unless we need them for an investigation.

11. Your rights

Subject to the law that applies, you may have the right to:

ask whether we hold personal information about you, and for a copy of it;
ask us to correct information that is inaccurate or incomplete;
ask us to delete your account and personal information;
object to processing based on legitimate interests;
withdraw consent where we rely on consent;
ask for a restriction, or for a portable copy, where the GDPR or UK GDPR gives you that right;
complain to a regulator. In South Africa that is the Information Regulator (inforegulator.org.za). If you are in the EEA or the UK, you may also complain to your local supervisory authority.

Email hello@systrantic.com with the subject "Privacy request". We may need to confirm your identity. We aim to respond within a reasonable time and within any period the law sets. Some rights are limited, for example where we must keep a purchase record for tax.

There is no self-serve deletion control in the application yet. Email us and we will close the account and delete or minimise the personal information, subject to the retention rules above.

12. International users

European Economic Area and the United Kingdom

If the GDPR or UK GDPR applies to our processing of your information, you have the rights listed in section 11, including access, rectification, erasure, restriction, portability, and objection. Our contact in section 2 is the contact for those requests. You may lodge a complaint with a supervisory authority. Our lead factual connection is South Africa. We will still consider a request from an EEA or UK authority when the law requires us to.

United States

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, may give you the right to know, delete, and correct personal information, and to opt out of "sale" or "sharing" for cross-context behavioural advertising. We do not sell personal information and we do not share it for cross-context behavioural advertising. We will not discriminate against you for exercising a privacy right. To make a request, email hello@systrantic.com. You may use an authorised agent if you provide proof of authority. Other US state privacy laws, where they apply to us, give similar rights, and you can use the same email.

Categories we collect from users are identifiers (such as name and email), commercial information (such as the plan you bought), and internet or device information (such as logs). We use them for the purposes in section 5.

13. Children

The Service is not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

14. Cookies and similar technologies

The marketing website uses Google Analytics to measure visits, page views, and waitlist signups. Google sets first-party cookies on systrantic.com (typically named _ga and _ga_ with a suffix) and receives usage data such as page URL, browser and device type, approximate location, and a client identifier. We use this to understand how the site is used. We do not use it for advertising, and we do not sell it.

The Service also uses a small amount of storage that is needed to operate:

Sign-in: the application stores authentication tokens so you can stay signed in. These are essential.
Theme: the application stores your light or dark preference in local storage.
Email reminder: the application may store a session flag so it does not repeat a verification reminder in the same session.
Website form: the website stores a timestamp in local storage so a form cannot be submitted repeatedly in a short period.

You can clear cookies and site storage in your browser, or use a browser control that blocks analytics. If you block essential sign-in storage, you will not be able to stay signed in. We do not respond to "Do Not Track" browser signals.

15. Changes to this policy

We may update this policy. If we make a material change, we will notify you (for example by email or in the application) and change the "Last updated" date. If you keep using the Service after the effective date, you accept the updated policy.

16. Contact

Palmarius Technologies (Pty) Ltd
Cape Town, South Africa
Privacy: hello@systrantic.com
Support: support@systrantic.com