Privacy Policy

1. Introduction

JobFlow is a product of HYDRO TECH FORKLIFT ("we", "us", "our"). We respect your privacy and are committed to protecting personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA)and applicable South African data protection laws.

This policy explains what information we collect, how we use it, and your rights regarding your personal data when you use the JobFlow platform.

2. Information We Collect

• Account information: Your name, email address, company name, and hashed password when you create an account.
• Business data: Client details, job cards, quotes, invoices, equipment information, and signatures that you enter into the platform.
• Usage data: Anonymous analytics including page views, feature usage, and device information to improve our service.
• Photos: Before/after job photos uploaded to job cards are stored securely and associated with your company account.

3. How We Use Your Information

• To provide and maintain the JobFlow service
• To send transactional emails (quotes, invoices, job assignments) on your behalf
• To communicate service updates, security alerts, and support messages
• To improve the platform based on usage patterns
• To comply with legal obligations under South African law

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage & Security

• All data is stored on Supabase servers with encryption at rest and in transit.
• Photos and signatures are stored in secure cloud storage buckets with access controls.
• We use industry-standard practices including TLS/SSL encryption, database row-level security, and regular security updates.
• You retain full ownership of your business data. Upon account closure, your data is permanently deleted within 30 days.

5. Third-Party Services

JobFlow uses the following third-party services to operate:

• Resend — for sending transactional emails (quotes, invoices, notifications). Resend processes recipient email addresses only for delivery purposes.
• Supabase — for database hosting, authentication, and file storage. All data is encrypted and access-controlled.
• Vercel — for application hosting and deployment.

These providers are contractually bound to protect your data and comply with applicable data protection laws.

6. Your Rights Under POPIA

As a data subject under POPIA, you have the right to:

• Request access to your personal information held by us
• Request correction or deletion of inaccurate information
• Object to the processing of your personal information
• Lodge a complaint with the Information Regulator of South Africa
• Withdraw consent at any time (where processing is based on consent)

7. Cookies

JobFlow uses essential cookies for authentication and session management. We do not use tracking cookies or third-party analytics cookies. No cookie consent banner is required as we only use strictly necessary cookies.

8. Information Officer

Our Information Officer responsible for POPIA compliance can be contacted at:

9. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email or through the JobFlow platform. Continued use of the service after changes constitutes acceptance of the updated policy.