POPIA notice

Responsible party and Information Officer

Graspmeet (Pty) Ltd is the responsible party. Our registered Information Officer is TO BE CONFIRMED, reachable at TO BE CONFIRMED.

What we process, and why

Two groups of people. You, our user: your name, email and account settings, so we can give you an account and support it. And the people you meet: their contact details from the card or your typing, your notes about them, and transcripts of conversations you recorded — so the product can do the one thing it exists to do, which is help you remember them and follow up.

The lawful basis for your own information is the contract between us. For the people you save, you are the one with the relationship, and you are responsible for having a lawful basis to hold their information — we process it on your instruction.

The eight conditions

• ·Accountability. A named Information Officer, and this notice.
• ·Processing limitation. We collect what the product needs and nothing more. No enrichment, no purchased data, no lookups you did not ask for.
• ·Purpose specification. Collected to remember people and draft follow-ups. Not used to train models, build profiles, or sell to anyone.
• ·Further processing limitation. We do not repurpose your data.
• ·Information quality. Every field extracted from a card is shown to you before it is saved, and is editable afterwards — which is also why nothing becomes a lead until you confirm it.
• ·Openness. This notice and the privacy policy describe the actual behaviour of the software.
• ·Security safeguards. Encrypted in transit, private storage for images and audio, encrypted credentials, access scoped per user at every query.
• ·Data subject participation. See, correct, export and delete — mostly from inside the app, and otherwise on request.

Your rights under section 5

• ·To be told we hold information about you, and to ask what it is.
• ·To have it corrected, or deleted where we have no lawful reason to keep it.
• ·To object to processing, on reasonable grounds.
• ·Not to be subject to a decision made only by automatic means.
• ·To complain to the Information Regulator, and to go to court about a breach of the Act.

To exercise any of these, email TO BE CONFIRMED. We will respond within a reasonable period and in any case within the timeframes the Act sets.

If you were saved by someone else

Someone you met may have scanned your card into Graspmeet. They — not us — decided to record you, and they control that entry. You can still contact us and we will help you reach them, and where the Act obliges us to act, we will.

Recording conversations

The app records only when a user starts it. South African law — the Regulation of Interception of Communications Act — generally permits recording a conversation you are a party to. We tell users to say they are recording, and the app prompts them to before it begins. Whether they do is their responsibility, not ours.

Cross-border transfers

Our infrastructure providers may store or process information outside South Africa. Section 72 permits this where the recipient is subject to laws or binding agreements with protection substantially similar to POPIA, and that is the basis we rely on.

Complaints

Please raise it with us first — TO BE CONFIRMED. If you are not satisfied, you can complain to the Information Regulator (South Africa):

• ·Email: complaints.IR@inforegulator.org.za
• ·Website: inforegulator.org.za