Privacy Policy
Last updated: 12 June 2026
This Privacy Policy explains how Aiyoda ("Aiyoda", "we", "us" or "our") collects, uses, stores and protects personal information when you visit our website, request a demo, or use the Aiyoda platform and its modules (Inventra, Spectrum and Horizon). We are committed to handling your information responsibly and in line with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and South Africa's Protection of Personal Information Act (POPIA).
1. Who we are
Aiyoda is a Microsoft software asset management and cloud cost intelligence platform. For the purposes of this policy, Aiyoda is the data controller responsible for the personal information described below. If you have any questions about this policy or how we handle your information, please contact us using the details in the Contact us section.
2. Information we collect
Information you provide to us
When you contact us or request a demo, we may collect:
- Your name, business email address and telephone number;
- Your company name, job title and the approximate size of your IT estate;
- Any message or details you choose to include in a form or email.
Information we collect automatically
When you visit our website, we may automatically collect limited technical information, such as:
- IP address, browser type and device information;
- Pages viewed, referring pages and the date and time of your visit;
- Information collected through cookies and similar technologies (see Cookies).
Information processed through the platform
Where your organisation connects its Microsoft environment to the Aiyoda platform, we process configuration, licensing, usage, cost and resource data from your Microsoft 365 and Microsoft Azure tenants in order to provide the service.
3. How we use your information
We use personal information to:
- Respond to enquiries and demo requests, and to communicate with you about our services;
- Provide, operate, maintain and improve the Aiyoda platform and its modules;
- Generate the reporting, recommendations and cost intelligence the service is designed to deliver;
- Monitor and secure our website and services, and detect and prevent misuse;
- Comply with our legal and regulatory obligations.
4. Legal bases for processing
Where the GDPR or POPIA applies, we rely on one or more of the following lawful bases to process your personal information: your consent; the performance of a contract with you or your organisation; our legitimate interests in operating and improving our business (balanced against your rights); and compliance with legal obligations.
5. Cookies and analytics
Our website uses cookies and similar technologies. Strictly necessary cookies are required for the site to function. We may also use analytics cookies to understand how the site is used so we can improve it. You can control or disable cookies through your browser settings; disabling some cookies may affect how the website works.
6. How we share information
We do not sell your personal information. We may share it with:
- Service providers who process data on our behalf (for example, hosting, email delivery and analytics providers) under appropriate confidentiality and data protection terms;
- Professional advisers such as legal and accounting professionals where necessary;
- Authorities or third parties where required by law, to enforce our terms, or to protect the rights, property or safety of Aiyoda, our customers or others.
7. International transfers
Your information may be processed in countries other than your own. Where we transfer personal information across borders, we take steps to ensure it is afforded an appropriate level of protection in line with applicable data protection laws.
8. Data retention
We retain personal information only for as long as necessary to fulfil the purposes set out in this policy, to provide our services to your organisation, and to comply with our legal, accounting or reporting obligations. When information is no longer required, we securely delete or anonymise it.
9. How we protect your information
We implement appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse or alteration. These include access controls, encryption in transit, and the principle of least privilege across our systems. No method of transmission or storage is completely secure, but we work continuously to safeguard the information entrusted to us.
10. Your rights
Depending on your location, you may have rights in relation to your personal information, including the right to access, correct, delete or restrict its use, to object to certain processing, to data portability, and to withdraw consent where processing is based on consent. To exercise any of these rights, please contact us using the details below. You also have the right to lodge a complaint with your local data protection authority.
11. Children's privacy
Aiyoda is a business-to-business service and is not directed at children. We do not knowingly collect personal information from children.
12. Third-party links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites, and we encourage you to review their privacy policies.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
14. Contact us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: