Privacy Policy (POPIA)

1. Information we collect

• Account & business data: your name, email, phone number, password (hashed), business name, industry, city and province — collected when you register.
• Billing data: processed by our payment provider Paystack; we receive limited transaction metadata, not full card numbers.
• Usage data: log data, device/browser information, IP address, and how you interact with the Service.
• Customer Data you upload: information about your own clients, quotes, jobs and invoices. For this data you are the Responsible Party and we act as your Operator (processor).
• Communications: support requests and messages (including WhatsApp where enabled).

2. Why we process it (lawful basis)

We process personal information to: create and manage your account and tenant; provide the Service; process payments; provide support; ensure security and prevent fraud; comply with legal obligations; and, where you have opted in, send you product and marketing communications. Our bases include performance of our contract with you, legitimate interest, legal obligation, and consent (for marketing).

3. Direct marketing

We only send electronic marketing (email/SMS/WhatsApp) where POPIA section 69 permits — i.e. to existing customers about similar services, or where you have opted in. Every marketing message includes a clear, free unsubscribe. You can opt out at any time via the unsubscribe link or by emailing tiaanj@gmail.com.

4. How we share information

We share personal information only with: sub-processors who help us run the Service (e.g. Paystack for payments, Supabase for hosting/database, Resend for email, Meta for WhatsApp where enabled); professional advisors; and authorities where legally required. We require sub-processors to protect personal information to POPIA standards. We do not sell personal information.

5. Cross-border transfers

Some sub-processors may process data outside South Africa. Where they do, we ensure an adequate level of protection as required by POPIA section 72 (e.g. contractual safeguards).

6. Security

We apply reasonable technical and organisational measures, including encryption in transit, role-based access, tenant isolation, and service-role-only access to sensitive configuration. No system is perfectly secure; we will notify you and the Information Regulator of a compromise as required by POPIA.

7. Retention

We keep personal information only as long as necessary for the purposes above or as required by law (e.g. tax/financial records). On account termination we make Customer Data available for export for 30 days, after which it may be deleted.

8. Your rights (data subjects)

You may: ask what personal information we hold; request correction or deletion; object to processing (including direct marketing); and lodge a complaint. To exercise these, contact tiaanj@gmail.com. You may also complain to the Information Regulator (South Africa) — see inforegulator.org.za for current contact details.

9. Cookies

We use necessary cookies to run the Service and analytics cookies where enabled. You can control cookies in your browser.

10. Children

The Service is intended for businesses and is not directed at children under 18.

11. Changes

We may update this policy; material changes will be posted here and, where appropriate, notified by email.

12. Contact

Information Officer: Tiaan Jordaan, AIKIT (Pty) Ltd, Unit 9, 145 Hornbill Avenue, Douglasdale, Sandton, Gauteng, 2191. Email: tiaanj@gmail.com.