Privacy Policy
Updated 13 September 2026

Privacy Policy

This Privacy Policy explains how TeamThink Solutions (Pty) Ltd t/a Devv Technology ("we", "our", or "Devv Technology") collects, uses, shares, and safeguards your personal information when you use Rhemabooks ("the Platform"). We are committed to processing your data in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Responsible Party

TeamThink Solutions (Pty) Ltd t/a Devv Technology
Registered in the Republic of South Africa
Email: legal@teamthink.co.za

As the responsible party under POPIA, we determine the purpose and means of processing your personal information.

2. Scope

This policy applies to all Rhemabooks users, including:

  • Readers - individuals who browse, purchase, or read ebooks
  • Authors - individuals or organisations who upload and sell ebooks
  • Visitors - anyone who accesses the website without creating an account

3. Personal Information We Collect

We collect the following categories of personal information:

Account Data

Email address, first name, last name, pen name, profile photo, bio, website URL, and location. This is provided directly by you during registration or onboarding.

Financial Data (Authors)

Payout account details supplied by authors (such as bank details or a PayPal email), payment references, author earnings, commissions, refunds, chargebacks, and payout records. Card payments are processed by the relevant payment provider; Rhemabooks does not intentionally collect or store complete card numbers in its own application database.

Content Data

Ebook files (EPUB format) uploaded by authors, book cover images, descriptions, and metadata.

Reading & Behaviour Data

Reading progress (percentage per book), purchase history, genre preferences, and session timestamps. This helps us personalise your experience.

Device & Technical Data

IP address, browser type, operating system, device type, and access times - collected automatically via server logs and analytics tools.

4. Lawful Basis for Processing

We process your personal information on the following lawful grounds under POPIA:

  • Contractual necessity - to fulfil our obligations when you register, purchase, or publish on the platform
  • Legitimate interests - to improve the platform, prevent fraud, and send relevant communications
  • Consent - for optional marketing communications (you may withdraw consent at any time)
  • Legal obligation - to comply with applicable South African law, including tax and financial reporting requirements

5. How We Use Your Data

  • Creating and managing your account
  • Processing book purchases and author payouts
  • Calculating and applying the correct commission rate to author earnings
  • Providing reading progress sync across devices
  • Reviewing book submissions for content compliance
  • Sending transactional emails (receipts, approval/rejection notices, payout confirmations)
  • Detecting and preventing fraudulent activity
  • Generating anonymised usage analytics to improve the platform
  • Complying with legal and regulatory obligations

6. Commission & Author Earnings Disclosure

How Platform Commissions Work

When an author earns revenue from book sales, Devv Technology retains a platform commission before crediting the author's wallet. There are no monthly subscription fees - all authors publish on the same flat-rate model:

Standard (all authors)20% platform feeAuthor keeps 80%
Featured Placement (opt-in)40% platform feeAuthor keeps 60%

Processing this financial data is necessary for the performance of our contract with authors. Commission-related records are retained for 5 years for tax and audit purposes.

7. Third-Party Service Providers

We use service providers where reasonably necessary to operate Rhemabooks. Their own terms and privacy notices also apply to their processing:

Supabase

Database hosting, authentication, and file storage

EU / US

Privacy Policy ↗

Paystack

Payment processing and subscription billing

Nigeria / Global

Privacy Policy ↗

Vercel

Web application hosting and edge delivery

US / Global

Privacy Policy ↗

Devv Hub (TeamThink Solutions)

Cross-platform identity, activity sync, and billing federation

South Africa

Privacy Policy ↗

8. Data Retention

  • Account data - retained while the account is active and thereafter only as reasonably required for legal, security, dispute, recovery, or operational purposes.
  • Financial records - retained for 5 years as required by South African tax law.
  • Reading progress - retained while your account is active; deleted on account deletion.
  • Technical and security records - retained for a proportionate period based on security, fraud-prevention, troubleshooting, and legal requirements.

9. Your Rights Under POPIA

As a data subject, you have the right to:

  • Access - request a copy of your personal information we hold
  • Correction - request that inaccurate data be corrected
  • Deletion - request erasure of your personal data (subject to legal retention requirements)
  • Objection - object to processing based on legitimate interests
  • Withdraw consent - at any time, for processing based on consent (e.g., marketing emails)
  • Lodge a complaint - with the Information Regulator of South Africa at inforegulator.org.za

To exercise a right, email us at legal@teamthink.co.za with enough information for us to verify your identity and locate the relevant records. We will respond within the period required by applicable law and may explain if a lawful limitation applies.

10. Security

We use reasonable technical and organisational safeguards, including encrypted transport, authentication, role-based access, tenant isolation, storage controls, audit records, and restricted administrative access where applicable. No system is completely secure. If a security compromise affects personal information, we will investigate and notify affected parties and the Information Regulator where POPIA requires it.

11. Children

Rhemabooks accounts, purchases, and author services are intended for adults. A minor may read only through an account created and controlled by a parent, guardian, or other legally authorised adult. If we learn that a child's information was collected without an appropriate lawful basis or authority, we will restrict the account and take appropriate steps, which may include deletion subject to legal retention requirements.

12. Changes to This Policy

We may update this policy as the Platform, providers, or legal requirements change. The revised version will be posted with an updated date. Material changes will be communicated through email, an in-platform notice, or another reasonable channel.

13. Contact

For any privacy-related queries, requests, or complaints:
TeamThink Solutions (Pty) Ltd t/a Devv Technology
Email: legal@teamthink.co.za