Privacy Policy

This policy explains how CubeP2P processes personal information when renters, hosts, moving-partner applicants, approved moving partners, website visitors and support contacts use the platform. Under South Africa's Protection of Personal Information Act, 2013 (POPIA), CubeP2P acts as the responsible party for processing it determines.

Account and identity information may include your name, email address, profile image, identity-document and selfie images, authentication identifiers, verification status and communications. CubeP2P currently supports email-and-password and Google account authentication, not phone-number login.

Marketplace information may include listing addresses, descriptions, photographs, ownership or authority evidence, availability, prices, booking details, access instructions, inventories, move-in and move-out condition records, uploaded evidence, reviews, reports and support records.

Moving-partner information may include applicant and business details, registration and insurance information, service areas, fleet and staffing details, licences or supporting documents, assigned job information, item quantities, pickup and delivery addresses, preferred and proposed schedules, quotes, private messages and job status.

Payment providers may process card, bank or transaction details. CubeP2P may receive transaction references, payment status, amount and fraud signals rather than full card details. We also collect device, browser, IP address, session, security and usage information. For sign-in security, CubeP2P may retain a short device description, the time and an approximate network-derived city, region and country. Raw session identifiers are converted to protected one-way fingerprints and precise GPS coordinates are not collected for this purpose. Network location can be inaccurate, especially on mobile networks or VPNs, and is not proof of residence or identity.

We process information to register and secure accounts; verify users and partners; review and publish listings; facilitate requests, bookings, messages, moving quotes, payments and payouts; provide support; moderate content; prevent fraud; resolve disputes; and improve platform reliability.

Depending on the activity, processing may be necessary to perform or prepare for an agreement, comply with law, pursue a legitimate interest that does not override your rights, protect a legitimate interest, or act with your consent. You may withdraw consent, but this does not invalidate earlier lawful processing.

Public profiles and listings may show a display name, profile image, reviews, listing photographs, description, approximate area and other information clearly marked for publication. Exact listing addresses, private contact details and identity documents are not intended for public display. The exact address and navigation details are released to the renter only after the relevant booking authorisation is verified or payment is captured.

For a consented moving request, the selected approved partner may receive the addresses, item list, schedule, access notes and customer details reasonably needed to quote. After a verified moving authorisation or moving payment, the assigned partner and renter continue to use that request for performance and status updates. A booking is locked from requesting another mover for the same completed service type.

We may use vetted providers for cloud hosting, database, file storage, authentication, payments, AI-assisted support, transactional email, security, analytics and professional advice. Current providers may include Vercel, Supabase, an approved payment provider, Resend and Google services where the relevant feature is used. Each provider receives only the information reasonably needed for its function and may process it under its own privacy terms.

We may also disclose information with consent, to comply with lawful process, or to investigate fraud, safety incidents or legal claims. CubeP2P does not sell personal information.

Identity, selfie, ownership, insurance, bank-confirmation and partner documents are restricted to authorised personnel and service providers with a genuine operational need. Do not upload more information than requested or place identity numbers, passwords, bank-card details or access codes in public fields or ordinary messages.

Camera and document tools may check image quality, visible document structure, text consistency and a prompted selfie challenge. These checks produce review signals only. They do not declare a document genuine, perform a government identity check or automatically approve a person. An authorised administrator makes the final decision and records a reason.

If selfie or identity imagery is used for verification, CubeP2P processes it for identity, fraud-prevention and trust-and-safety purposes and applies additional access controls appropriate to its sensitivity.

To discourage duplicate or evasive accounts, CubeP2P may create a protected one-way fingerprint from normalised identity-document information and compare it with existing verification records. The fingerprint is not the document number and is not displayed publicly. Potential matches require authorised human review before enforcement. Shared addresses, devices or networks are risk signals only and are not by themselves proof that accounts belong to one person.

Third-party payment providers process payment information under their own notices and security controls. Space bookings and moving services use separate checkout and transaction records. CubeP2P uses payment and payout records to manage marketplace bookings, confirm access and payout eligibility, calculate platform and partner amounts, prevent duplicate payments, respond to chargebacks and meet accounting or legal obligations. These records do not move or safeguard customer money. The approved payment provider controls the actual movement of funds.

CubeP2P uses cookies, browser storage and similar technology where necessary to keep you signed in, remember choices, secure the service and understand performance. Blocking essential storage may prevent account features from working.

We may send service messages about verification, bookings, jobs, payments, safety and support. A sign-in from an approximate city or country that has not previously been confirmed may trigger a required account-security email showing the device description, approximate location and time, with controls to confirm the activity or start password recovery. Promotional electronic messages will be handled in accordance with applicable law and available opt-out choices.

Some service providers may store or access information outside South Africa. Where this happens, CubeP2P will use an appropriate POPIA basis and reasonable contractual, organisational or legal safeguards for cross-border processing.

We retain information only for as long as reasonably needed for the purpose collected, an active account or transaction, safety and fraud prevention, dispute handling, financial records and legal obligations. Raw identity-verification camera images are normally deleted 30 days after the final review. Deletion may be delayed while an appeal, suspected fraud investigation, dispute or legal requirement remains active. The verification decision, protected identity fingerprint, enforcement history and limited audit information may be retained separately to prevent a restricted person from bypassing a decision with another account. When information is no longer required, it is deleted, destroyed or de-identified where reasonably practicable.

CubeP2P uses reasonable technical and organisational safeguards, including access restrictions, private storage, time-limited review links, audit records and protected service connections. No internet service is completely secure. Protect your password, use your own account and notify support promptly of suspected compromise.

If CubeP2P becomes reasonably sure that a security compromise has occurred, it will take steps to limit harm and notify the Information Regulator and affected people as soon as reasonably possible as required by POPIA, subject to any lawful restriction on timing or detail.

Subject to POPIA, you may ask whether we hold your information, request access or correction, object to certain processing, request deletion or destruction where legally available, withdraw consent, and complain about unlawful processing. We may verify your identity and may refuse or limit a request where law permits.

Use the Privacy and PAIA requests page to start the correct process. If you are dissatisfied, you may also lodge a POPIA complaint with South Africa's Information Regulator through its official complaints service.

CubeP2P accounts, listings, bookings and moving-partner services are intended for people aged 18 or older who can enter binding agreements. Do not submit a child's personal information unless you have lawful authority and it is necessary for an approved purpose.

Cubi is CubeP2P's automated, AI-powered virtual assistant. When you use Cubi, your question and recent chat context may be sent to an AI service provider to generate general guidance. Do not submit passwords, full card details, identity numbers, exact addresses or private documents. Cubi is not used to approve accounts, decide refunds or disputes, or make emergency, legal or verification decisions.

Cubi conversations and related safety signals may be stored with your support record for continuity, security and quality review. If a matter needs private review, Cubi directs you to Send a Message on the Contact page rather than claiming that a live agent is present.

We may update this policy when the platform, providers or legal requirements change. We will post the revised version and effective date here and provide additional notice when appropriate.

For privacy questions, rights requests or complaints, use CubeP2P's Privacy and PAIA requests page or email privacy@cubep2p.com. The responsible private body is CUBEP2P (PTY) LTD, registration number 2026/647630/07. Its registered and business contact address is 1st Floor, Foyer 3, The Colosseum, Century Way, Century City, 7441, Cape Town, South Africa, and its telephone number is 021 301 0523.