Privacy Policy

1. Introduction

This policy explains what personal information Poynter ("we", "us") collects when you use our website and app, why we collect it, who we share it with, and the rights you have over it. It applies to customers and businesses alike, and is written to comply with South Africa's Protection of Personal Information Act, 2013 (POPIA).

2. Information we collect

We collect information in three ways:

• Information you give us directly: name, email address, phone number, password, and — for businesses — business name, description, address, service categories, photos, and verification documents.
• Information collected automatically: your approximate or precise location when you submit a service request or pin a business location, device and browser information, and basic usage data (pages visited, actions taken) needed to operate and secure the service.
• Information generated by using the service: service requests, in-app messages, ratings and reviews, favorites, and reports you submit or that are submitted about you.

3. How we use your information

• To match customers with nearby businesses that offer the service they need.
• To notify businesses of new requests, by push notification, in-app, and (where a number is provided) WhatsApp.
• To let matched customers and businesses contact each other directly.
• To display public business profiles, including ratings and reviews.
• To verify business accounts and review reports of misuse.
• To protect the platform from spam and abuse, including rate-limiting and fraud checks.
• To send account-related emails, such as sign-up verification codes and password resets.

4. Legal basis for processing

We process your information because it is necessary to perform our contract with you (matching you with a business or customer, as applicable), because you've consented to it (for example, sharing your location or phone number), or because we have a legitimate interest in keeping the platform safe and functioning (fraud prevention, rate limiting, error monitoring).

5. Who we share it with

Your name and contact details are shared with a business only once they're matched to your request — never before, and never with businesses you weren't matched to. Business profiles are public by design, since customers browse them before requesting a service.

We also share limited data with the service providers that operate Poynter, each acting under contract and only for the purpose of providing their service to us:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting.
• Mapbox — address search and mapping.
• Peach Payments — processing optional paid features businesses purchase directly from Poynter (such as a featured listing).
• Our email and web-push providers — for account verification, password resets, and job notifications.

We may also disclose information where required by law, or to protect the rights, safety, or property of Poynter, our users, or the public. We do not sell your personal information.

6. Data retention

We keep your information for as long as your account is active, and for a reasonable period afterward where needed to resolve disputes, enforce our terms, or comply with legal obligations. You can request deletion at any time — see your rights below.

7. Your rights

Under POPIA, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or outdated information.
• Request deletion of your information, subject to any legal retention requirements.
• Object to processing carried out on the basis of legitimate interest.
• Lodge a complaint with the Information Regulator of South Africa if you believe we've mishandled your information.

You can exercise the access, correction, and deletion rights directly, at any time, from your account settings— "Download my data" and "Delete account". Deleting your account removes your profile, requests, messages, ratings, and favorites tied to it.

8. Security

We use industry-standard measures to protect your information, including encrypted connections, access controls limiting who inside Poynter can view personal data, and row-level security at the database layer so users can only read data they're authorized to see. No system is completely secure, and we can't guarantee absolute protection against all threats.

9. Children's privacy

Poynter is not intended for use by children under 18. We don't knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we'll remove it.

10. International data transfers

Some of our service providers host infrastructure outside South Africa. Where your information is transferred internationally, we take reasonable steps to ensure it remains protected to a standard consistent with POPIA.

11. Cookies

Poynter uses only the essential cookies needed to keep you signed in and to remember basic preferences. We don't use advertising or third-party tracking cookies.

12. Third-party links

Business profiles and messages may contain links to third-party sites or services (for example, WhatsApp or a mapping app). We're not responsible for the privacy practices of those third parties — check their own policies before sharing information with them.

13. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the date at the top of this page. Continuing to use Poynter after a change means you accept the updated policy.

14. Contact us

For any question about this policy or your personal information, or to exercise a right not covered by your account settings, contact us using the details listed on our homepage.