Privacy Policy

1. Introduction

This Privacy Policy explains how Opdeck ("we", "us", "our") collects, uses, stores and protects personal information when you use our field service management platform (the "Service").

2. Information We Collect

We collect the following categories of information:

• Account information: name, email address, and password (stored as a secure hash, never in plain text) when you register.
• Company information: your business name and, if provided, a company logo.
• Customer and job data: information you enter about your own customers, sites, assets, and job cards — including photos and digital signatures captured during job completion.
• Billing information: subscription plan and payment status. Card details themselves are handled entirely by our payment processor, PayFast, and are never stored on our servers.
• Usage data: basic technical information such as browser type and general usage patterns, used to maintain and improve the Service.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process subscription payments and manage billing
• Send account-related emails (verification, password resets, team invitations, job assignment notifications)
• Respond to support requests
• Detect and prevent fraud, abuse, or security issues

4. Third-Party Service Providers

We rely on trusted third-party providers to operate Opdeck. Each processes a limited scope of data strictly to provide their service to us:

• Supabase — hosts our primary database (customer, job, and account records).
• Vercel — hosts the application itself and, via Vercel Blob, stores uploaded photos and signatures.
• Resend — sends transactional emails on our behalf (verification, password resets, invitations, notifications).
• PayFast — processes subscription payments. We never see or store your card details.

5. Data Retention

We retain your information for as long as your account is active, or as needed to provide the Service. If you close your account, we will delete or anonymize your data within a reasonable period, except where we are required to retain certain records for legal or accounting purposes.

6. Your Rights

Under POPIA, you have the right to request access to, correction of, or deletion of your personal information, and to object to certain processing. To exercise any of these rights, contact us using the details below.

7. Cookies

We use essential cookies required for authentication and to keep you securely signed in. We do not use third-party advertising or tracking cookies.

8. Security

We take reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS), hashed passwords, and access controls limiting data visibility to your own company's account. No system can be guaranteed 100% secure, and we encourage you to use a strong, unique password.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice.

10. Contact

Questions about this policy or your data? Contact us at hello@opdeck.co.za.