CallInstall Privacy Policy

Version: 2026-07-19

Effective date: 19 July 2026

This Privacy Policy explains how Call Install Solutions (Pty) Ltd, registration number 2026/145832/07, of 8 Fairbairn Street, Worcester, Worcester, Western Cape, 6850 ("CallInstall", "we", "us") collects and processes personal information on the CallInstall platform — the web application, the technician mobile application, the guest task links, and the callinstall.co.za website (together, the "Platform").

We are the "responsible party" under the Protection of Personal Information Act 4 of 2013 ("POPIA"). Our Information Officer can be contacted at admin@callinstall.co.za.

1. What we collect

Account information (all users): first, middle, and last name; email address; phone number; role and organisation; account status. Passwords are stored only as secure hashes by our authentication provider — we never see them.

Technicians:

Location: when you start a job, your device's GPS position (latitude, longitude, and accuracy) is captured once to confirm you are at the job site, and is stored against that job. If location is unavailable, the reason you give is stored instead. We do not track your location in the background or at any other time.
Job evidence: before/after photos you take, the customer's signature, and invoice documents you upload.
Availability status and job history.
Push notifications: a push token and device platform, so we can send you job updates.

Guest technicians: name, phone number, one-time GPS start location, job photos, and the customer signature — collected through the guest link, together with your recorded acceptance of the Terms.

Customer and site information entered by organisations: customer name and phone numbers, and the job site address (including coordinates). Organisations must only enter customer information they are entitled to share with us for the purpose of the job.

Technical information: authentication session data necessary for the Platform to work. We do not use analytics or advertising trackers on any part of the Platform.

2. Why we process it (purposes and lawful bases)

To provide the Platform — creating and managing tasks, assignment, quoting, job execution, evidence capture, and invoicing (performance of a contract).
To verify work — confirming a technician was on-site (job-start location) and that work was completed (photos, signature); preventing fraud (legitimate interests).
To communicate — transactional emails (invitations, notifications) and push notifications about jobs (performance of a contract; you can disable push notifications in your device settings).
To meet legal obligations — accounting and tax records for invoiced work.
To keep records of consent — the version and time of your acceptance of the Terms.

We do not sell personal information, and we do not use it for advertising.

3. Who we share it with

We use a small number of service providers ("operators" under POPIA) to run the Platform:

Supabase — hosting of our database, authentication, and file storage (photos, signatures, invoices).
Resend — sending transactional email (for example, invitations).
Expo — delivering push notifications to the mobile app.
Xero — our accounting system. For invoicing, contact details (organisation or technician name, email, phone, address) and invoice data are synced to Xero.
Slack — internal notifications to the CallInstall team when a task is created (task name, type, and organisation name).

These providers process personal information on our instructions. We also share information within the Platform itself according to your role — for example, an assigned technician sees the customer name, phone number, and site address of their job.

We will disclose personal information where required by law or a court order.

4. Cross-border transfers

Our service providers listed above store data on servers located outside South Africa (primarily in the European Union and United States). We transfer personal information to them under section 72 of POPIA, on the basis that they are subject to laws or binding agreements that provide substantially similar protection, or the transfer is necessary to perform our contract with you or your organisation.

5. Retention

We keep personal information for as long as your account or your organisation's relationship with us is active, and afterwards only as long as needed for the purposes above — including statutory retention periods for financial records (generally 5 years). Job evidence (photos, signatures, locations) is retained with the job record for the same periods. When retention ends, information is deleted or anonymised.

6. Security

Personal information is encrypted in transit and at rest. Access within the Platform is restricted by role-based permissions enforced at the database level (row-level security). Guest links are protected by hashed tokens and PINs with lockout on repeated failures. No system is perfectly secure; if a breach affecting your personal information occurs, we will notify you and the Information Regulator as POPIA requires.

7. Your rights

Under POPIA you may:

request confirmation of, and access to, the personal information we hold about you;
request correction of inaccurate information, or deletion where we are not entitled to keep it;
object to processing based on legitimate interests;
complain to the Information Regulator (South Africa): complaints.IR@inforegulator.org.za / https://inforegulator.org.za.

To exercise these rights, contact our Information Officer at admin@callinstall.co.za. We will respond within a reasonable time and may need to verify your identity first.

Some information cannot be deleted on request — for example, invoicing records we must keep by law, or job evidence that belongs to the job record of a Client Organisation. Where that is the case, we will tell you why.

8. Cookies and local storage

The Platform uses only essential browser storage to keep you signed in. We do not use analytics, advertising, or tracking cookies anywhere on the Platform or the callinstall.co.za website, so there is no cookie consent banner.

9. Children

The Platform is for business use by people aged 18 or older. We do not knowingly collect personal information from children.

10. Changes to this policy

Each version of this policy is identified by its version date. If we make material changes, Platform users will be asked to accept the updated version before continuing to use the Platform.

11. Contact

Call Install Solutions (Pty) Ltd (reg. no. 2026/145832/07)

8 Fairbairn Street, Worcester, Worcester, Western Cape, 6850

Information Officer: admin@callinstall.co.za

General support: support@callinstall.co.za