Legal · POPIA
Cookie Consent Notice
goodtogoat.ai Platform – South Africa
Protection of Personal Information Act 4 of 2013 (POPIA)
| Version | 1.1 |
|---|---|
| Effective Date | 7 September 2026 |
| Last Reviewed | 7 September 2026 |
| Responsible Party | Good To Goat AI Ltd, trading as goodtogoat.ai |
| Information Officer | David Jedeikin – david@seebird.ai |
| Contact | privacy@goodtogoat.ai |
Live Cookie Inventory
The list below is generated automatically by our Consent Management Platform (CookieBot) and reflects the cookies and tracking technologies currently deployed on this site. The static tables further down remain the formal legal record under POPIA.
1. What Are Cookies?
Cookies are small text files placed on your device when you visit a website or use a web application. They help the website remember your preferences, keep you logged in, and understand how you use the service. Similar technologies include web beacons, pixels, local storage, and session storage.
This Cookie Consent Notice explains what cookies and similar technologies goodtogoat.ai uses, why we use them, and how you can control your preferences. It forms part of our Privacy Policy and should be read alongside it.
2. Legal Basis Under POPIA
The use of cookies may involve the collection and processing of personal information (such as IP addresses, device identifiers, and browsing behaviour). Under POPIA, we rely on the following lawful bases:
| Cookie Category | Lawful Basis (POPIA) | Consent Required? |
|---|---|---|
| Strictly Necessary | Contractual necessity / legitimate interest (s11(1)(b) and (f)) | No – cannot be disabled |
| Functional / Preference | Consent (s11(1)(a)) | Yes – opt-in required |
| Analytics / Performance | Consent (s11(1)(a)) | Yes – opt-in required |
| Marketing / Targeting | Consent (s11(1)(a)) | Yes – opt-in required |
3. Cookies We Use
3.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function and cannot be disabled. They do not collect personal information for marketing or analytics purposes.
| Cookie Name | Provider | Type | Purpose | Duration | Consent Required | POPIA Basis |
|---|---|---|---|---|---|---|
| __session | goodtogoat.ai | 1st party | User session management and authentication | Session | No | Contract (s11(1)(b)) |
| csrf_token | goodtogoat.ai | 1st party | Cross-site request forgery protection | Session | No | Contract (s11(1)(b)) |
| auth_token | PropelAuth | 3rd party | Authentication and identity verification | 30 days | No | Contract (s11(1)(b)) |
| wos-session | WorkOS (set by the Platform) | 1st party | Authentication and sign-in session for the Seebird app (app.seebird.ai) | Up to 30 days (the sign-in session it carries ends after 12 hours of inactivity) | No | Contract (s11(1)(b)) |
| _vercel_* | Vercel | 3rd party | Load balancing and infrastructure routing | Session | No | Legitimate interest |
3.2 Functional / Preference Cookies
These cookies remember your preferences and settings to improve your experience. They require your consent.
| Cookie Name | Provider | Type | Purpose | Duration | Consent Required | POPIA Basis |
|---|---|---|---|---|---|---|
| locale_pref | goodtogoat.ai | 1st party | Language and regional display preferences | 1 year | Yes | Consent (s11(1)(a)) |
| ui_theme | goodtogoat.ai | 1st party | Light / dark mode and interface preferences | 1 year | Yes | Consent (s11(1)(a)) |
3.3 Analytics / Performance Cookies
These cookies help us understand how the Platform is used so we can improve its performance and usability. They require your consent.
| Cookie Name | Provider | Type | Purpose | Duration | Consent Required | POPIA Basis |
|---|---|---|---|---|---|---|
| _sentry_* | Sentry | 3rd party | Application error and performance monitoring | Session / 1 year | Yes | Consent (s11(1)(a)) |
| analytics_id | goodtogoat.ai | 1st party | Aggregated usage analytics and feature tracking | 1 year | Yes | Consent (s11(1)(a)) |
3.4 Marketing / Targeting Cookies
The “Book a call” dialog embeds Google Calendar’s appointment scheduler. When you open it, Google sets cookies on the embedded content and receives your IP address, browser information, and any details you choose to enter into the scheduler. These cookies require your consent (see Section 2). We use no other marketing or advertising cookies on the Platform.
| Cookie Name | Provider | Type | Purpose | Duration | Consent Required | POPIA Basis |
|---|---|---|---|---|---|---|
| NID | Google (calendar.google.com) | 3rd party | Set by the embedded Google Calendar booking scheduler; Google preferences and security | 6 months | Yes | Consent (s11(1)(a)) |
4. How We Obtain Your Consent
When you first visit the goodtogoat.ai Platform, a cookie consent banner is displayed. This banner:
- Clearly describes the categories of cookies used and their purposes;
- Requires an affirmative action (opt-in) to consent to non-essential cookies – pre-ticked boxes are not used;
- Allows granular control so you can accept or reject each cookie category independently;
- Provides a link to this full Cookie Consent Notice; and
- Records your preferences and the date/time of consent for audit purposes.
You can change your cookie preferences at any time by clicking the “Cookie Settings” link in the Platform footer, or by contacting us at privacy@goodtogoat.ai.
5. Consent Records
In accordance with POPIA’s accountability condition, we maintain records of cookie consent. For each consent event, we record:
- User identifier or device identifier
- Cookie preferences selected (accepted / rejected by category)
- Version of the Cookie Notice presented
- Timestamp of consent (UTC)
- IP address and browser/device information
These records are retained for the duration of your use of the Platform plus 12 months, after which they are securely deleted.
6. Third-Party Cookies and Operators
Some cookies are set by third-party operators who process personal information on our behalf. We have entered into operator agreements with each third party that impose POPIA-consistent data protection obligations. Cross-border transfers are handled in accordance with POPIA section 72 and our Privacy Policy.
Third-party cookie providers used by the Platform include:
- Vercel (infrastructure, USA) – vercel.com/legal/privacy-policy
- PropelAuth (authentication, USA) – propelauth.com/privacy
- Sentry (error monitoring, USA) – sentry.io/privacy/
- Google (embedded booking calendar, USA) – policies.google.com/privacy
We are not responsible for the cookie practices of third-party websites linked from our Platform. Please review those websites’ own cookie notices.
7. Managing and Withdrawing Consent
You can manage your cookie preferences in the following ways:
7.1 Via the Cookie Settings Panel
Click “Cookie Settings” in the Platform footer at any time to update your preferences. Changes take effect immediately; some cookies may only be removed on your next visit.
7.2 Via Your Browser
Most browsers allow you to control cookies through their settings. You can:
- Block all cookies (note: this may prevent the Platform from functioning);
- Delete cookies already stored on your device; or
- Set your browser to notify you when cookies are placed.
Browser-specific guidance is available at:
- Google Chrome: support.google.com/chrome/answer/95647
- Mozilla Firefox: support.mozilla.org/kb/cookies
- Safari: support.apple.com/guide/safari/manage-cookies
- Microsoft Edge: support.microsoft.com/microsoft-edge
7.3 Consequences of Withdrawing Consent
If you withdraw consent for or block strictly necessary cookies, the Platform will not function correctly. Withdrawing consent for other categories will not affect Platform access but may reduce personalisation and performance monitoring functionality.
8. Personal Information Collected Through Cookies
The personal information collected via cookies may include:
- IP address and approximate geographic location
- Browser type, version, and operating system
- Pages visited, time spent, and clickstream data
- Device identifiers and session tokens
This information is processed in accordance with our Privacy Policy. It is used only for the purposes described in Section 3 above and is not sold to third parties.
9. Your Rights Under POPIA
With respect to personal information collected through cookies, you have the rights set out in our Privacy Policy, including the right to access, correct, or request deletion of your personal information, and the right to object to processing. Please contact privacy@goodtogoat.ai to exercise these rights.
You may also lodge a complaint with the Information Regulator of South Africa (www.inforegulator.org.za).
10. Updates to This Notice
We may update this Cookie Consent Notice from time to time to reflect changes in cookies used, their purposes, or the legal framework. Material updates will be communicated via the cookie consent banner on your next visit to the Platform. The effective date of the current version is shown at the top of this document.
11. Contact
| Information Officer | David Jedeikin |
|---|---|
| Company | Good To Goat AI Ltd (goodtogoat.ai) |
| privacy@goodtogoat.ai | |
| Information Regulator | www.inforegulator.org.za | inforeg@justice.gov.za |