OwnerPilot is a website and Command Centre platform for South Africa's owner-run guesthouses, restaurants, lodges and the like. It is operated by OwnerPilot (Pty) Ltd, Sandton, South Africa. Questions about this notice, or about anything we hold about you, go to billy@ownerpilot.co.za or +27 82 888 3218.
This page says what we collect, why, and what you can do about it. It is written to be read, not filed.
Who is responsible for what
Two kinds of information pass through OwnerPilot. The law, the Protection of Personal Information Act (POPIA), treats them differently.
Your account, your sign-in and the businesses you operate are information about you, and ours to look after. OwnerPilot is the Responsible Party for it.
Records a business keeps in its Command Centre about its guests, diners, members and enquirers belong to it. The business is the Responsible Party; OwnerPilot processes it only on the business's instructions, as its Operator. Guests of a business on OwnerPilot can ask that business to correct or remove their details. Or write to us, and we will pass the request on the same day.
What we collect about you, and why
Your Command Centre account
Your name, email address and mobile number. We use them to sign you in, with a one-time code by SMS or a link by email. We also use them to alert you when something needs you and to send documents you request. Nothing else.
Your Google Search Console data, only if you connect it
You press "Connect Search Console" in Get Found. Google then asks you to let OwnerPilot read your Search Console properties, read-only. You choose the one property that matches your website. From then on we read that property's search performance: the terms people searched, your position, clicks and impressions. We show it in your Command Centre and in your Search-Fit reports. We store the token Google gives us, so that we can keep reading on your behalf. We never write to Search Console and never read any other Google data. We share what we read with nobody but you and the members of your own business. You can withdraw the access at any time in Get Found, or at myaccount.google.com/permissions. Either way, we stop reading immediately.
Your website's visitors
On the websites we host, we count visits and page views. We record which pages led to an enquiry or booking, so you can see if the site works. We do not identify visitors across other websites. We do not sell or share visitor data with advertisers.
Enquiries and bookings
A form filled in on a business's website — name, email, phone, message, dates — goes to that business. If the form is on ownerpilot.co.za itself, it comes to us, so that we can reply.
OwnerPilot's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Who else sees it
The companies that run our machinery, each under contract and only as far as its job needs. They are hosting (Vercel), the database (Supabase), email delivery (Resend) and SMS delivery. Google, where you have connected a Google service, under Google's own terms. Nobody else, and never for money.
How long we keep it
For as long as your business uses OwnerPilot. Then for a short period afterwards, so that a mistaken cancellation can be undone. Ask, and we delete sooner. Trading figures a business has chosen to seal are encrypted with a key only that business holds. We cannot read them.
Your rights
Under POPIA you may ask what we hold about you, have it corrected, and have it deleted. Write to billy@ownerpilot.co.za. Not satisfied with how we respond? You may complain to the Information Regulator of South Africa (inforegulator.org.za).
Changes
When this notice changes, the date below changes with it. Anything material is announced in your Command Centre.
Last updated 28 September 2026.