Last updated: April 2026 | Governed by the laws of the Republic of South Africa
1. Who We Are
Contractor Hub, is a contractor business management platform built for South African tradespeople. This Privacy Policy explains how we collect, use, store, and protect your personal information in line with the Protection of Personal Information Act, 2013 (POPIA).
For any privacy-related queries, contact our Information Officer at: info@nextechdisplay.com
2. Information We Collect
We collect the following personal information when you use Contractor Hub:
- Account information: Your name, email address, and hashed password
- Business information: Business name, address, logo, banking details, trade type, and registration details
- Job and financial records: Invoices, quotes, contracts, expenses, payroll records, and booking history that you create
- Client data: Names, contact numbers, email addresses, and addresses of your clients (entered by you)
- WhatsApp number: Your phone number used for the WhatsApp Bot and SOS Dispatch notifications
- GPS and mileage data: Coordinates and distances captured when you use the GPS trip logging feature
- SOS Dispatch data: Your registered service area, dispatch history, accept/decline records, and accept codes generated during SOS jobs
- Consent records: The date, time, IP address, and device details logged when you accept these Terms and this Privacy Policy at registration
- Usage and security data: Login timestamps, IP addresses, and action audit logs
We do not collect or store payment card numbers. All payment processing is handled by PayFast.
3. Why We Collect It
Your information is used only for the following purposes:
- To provide, operate, and improve the Contractor Hub service
- To verify your identity and keep your account secure
- To generate invoices, quotes, contracts, and reports on your behalf
- To send WhatsApp and email notifications you have configured
- To match you with SOS Dispatch requests in your registered service area
- To record your consent to these terms as required by POPIA
- To process your subscription payments via PayFast
- To comply with legal obligations under POPIA and SARS requirements
We will never sell, rent, or share your personal information with third parties for marketing purposes.
4. SOS Dispatch — Data Collection and Disclaimer
Read carefully. The SOS Dispatch Network processes additional personal data and carries specific limitations you must understand.
When you register as a contractor for SOS Dispatch, or when a client submits an SOS request, the following data is collected and shared within the platform:
- Contractor name, WhatsApp number, trade type, and registered service area
- Client name, contact number, physical address, and emergency description
- A one-time accept code generated per dispatch request
- Accept/decline status and timestamps for each dispatch
- The resulting job record if a dispatch is accepted
This information is shared between the client and contractor solely to facilitate the connection. We do not share it with any unrelated third parties.
Privacy and Safety on SOS Dispatch: When a contractor accepts a dispatch, their name and WhatsApp number are shared with the client, and the client's address and contact details are shared with the contractor. You acknowledge that this exchange of contact information is necessary for the service and consent to it by using SOS Dispatch. We are not responsible for how either party uses this information outside of the platform, nor for any security, safety, or privacy incident that arises from a contractor attending a client's premises or vice versa.
We do not vet, verify, or background-check any contractor in the SOS Dispatch Network. We accept no responsibility for any injury, theft, fraud, security incident, or other harm arising from a connection made through SOS Dispatch. Refer to our Terms & Conditions, Section 3 for the full disclaimer and indemnity.
5. How We Store and Protect Your Data
- All data is stored in an encrypted MySQL database hosted on Hostinger servers (see Section 6)
- Passwords are hashed using bcrypt and never stored in plain text
- Public invoice, quote, and contract links are protected by 64-character random tokens
- All communication between your browser and our servers is encrypted via HTTPS/SSL
- Session-based authentication protects access to your account
- A full audit log is maintained for security monitoring
6. Third Parties We Share Data With
We only share data with third parties where necessary to deliver the service. By registering you acknowledge and consent to your data being processed by the following sub-processors:
-
Hostinger International Ltd (hostinger.com) — our web hosting and database provider. Your account data, job records, and uploaded files are stored on Hostinger servers. Hostinger is registered in Lithuania and operates data centres in the EU and globally. Their privacy policy is available at hostinger.com/privacy-policy.
-
GreenAPI (green-api.com) — delivers WhatsApp notifications and Bot messages on our behalf. When you enable WhatsApp features, your phone number and message content (job updates, SOS dispatch notifications, invoice links) are transmitted to GreenAPI's servers. GreenAPI is a licensed WhatsApp Business Solution Provider. Their privacy policy is available at green-api.com/privacy-policy.
-
PayFast (payfast.io) — processes Business and Enterprise subscription payments. Your name, email address, and payment details are shared with PayFast solely for billing. They are PCI DSS compliant and do not share your data for marketing. Their privacy policy is at payfast.io/privacy-policy.
-
SMTP Email Provider — used to send transactional emails such as invoices, quotes, and contract links. Your email address and the content of those documents are transmitted for delivery purposes only.
We do not sell, rent, or share your personal information with any other third parties. All sub-processors are contractually bound to protect your information.
7. Cross-Border Data Transfers
Some of our sub-processors are located outside South Africa:
- Hostinger is headquartered in Lithuania (European Union) and operates under GDPR, which carries broadly equivalent data protection standards to POPIA.
- GreenAPI servers may be located outside South Africa. Data transmitted for WhatsApp delivery crosses international borders. Contractual safeguards are in place as required by POPIA Section 72.
By using Contractor Hub and enabling WhatsApp features, you consent to your relevant personal information being transferred to these providers for the purposes described above.
8. How Long We Keep Your Data
- Your data is retained for as long as your account is active
- After account cancellation, your data is kept for 90 days to allow for reactivation, then permanently deleted
- You may request immediate deletion at any time (see Section 9)
- Audit logs, including consent records, are retained for up to 12 months for security and legal compliance
- SOS Dispatch records may be retained for up to 12 months for dispute resolution purposes
9. Your Rights Under POPIA
As a data subject under POPIA, you have the following rights:
- Right of access: Request a copy of all personal information we hold about you
- Right to correction: Request that inaccurate information be corrected
- Right to deletion: Request that your data be permanently deleted
- Right to object: Object to the processing of your personal information
- Right to complain: Lodge a complaint with the Information Regulator at inforeg.org.za
To exercise any of these rights, email our Information Officer at info@nextechdisplay.com. We will respond within 30 days.
You can also export or delete your data directly from within the app under Settings → Privacy & POPIA.
10. Cookies
Contractor Hub uses only essential session cookies required to keep you logged in. We do not use tracking cookies, advertising cookies, or any third-party analytics that identify you personally. Disabling cookies in your browser will prevent you from logging in.
11. Children's Privacy
Contractor Hub is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has registered, please contact us immediately so we can remove their account.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and with an in-app notice at least 14 days before the changes take effect. Continued use of Contractor Hub after that date means you accept the updated policy.
13. Contact Us
Information Officer: Contractor Hub
Email: info@nextechdisplay.com
Website: https://nextechdisplay.com/finance
To lodge a complaint with the South African Information Regulator:
Website: inforeg.org.za
Email: inforeg@justice.gov.za
