Privacy policy
This policy explains what personal information Kageflow collects, why, where it is kept and what your rights are under South Africa's Protection of Personal Information Act (POPIA).
Who we are
Kageflow is dealer management software built and run by Pretan Technologies, a company registered in Zimbabwe ("we", "us"). Our Information Officer is Tanatswa Matiza. You can reach us about anything in this policy at hello@kageflow.co.za.
Two different roles
For our own visitors and account holders, we decide what information we collect and why. We are the responsible party.
For a dealership's customers, the dealership decides what goes into Kageflow and we only store and process it on the dealership's behalf. We are its operator. If you bought a car from, or enquired with, a dealership that uses Kageflow, that dealership is responsible for your information. Contact the dealership first. We will help them answer you.
What we collect
| From | What | Why |
|---|---|---|
| Website visitors | Your IP address and browser details, which our hosting provider logs to deliver the page. The site loads fonts from Google, which also sees your IP address. | To show you the website and keep it secure |
| People who email us or book a demo | Your name, email, phone number, dealership name and what you write to us | To reply and arrange the demo |
| Kageflow users | Your name, email address, password (stored scrambled, never readable), role, sign-in times and the changes you make in Kageflow | To give you a secure login, keep an audit trail for your dealership and support you |
We do not use advertising trackers, we do not sell personal information, and we do not use a dealership's customer data for our own marketing.
Who we share it with
We use a small number of service providers to run Kageflow. Each is bound by a written agreement to protect the information.
| Provider | What it does | Where |
|---|---|---|
| Supabase | Database, file storage and logins | Frankfurt, Germany |
| Vercel | Hosts the website and the application | United States and a global network |
| Resend | Sends emails such as sign-up confirmations and password resets | European Union |
| Meta (WhatsApp Business) | Carries WhatsApp messages | Only when a dealership connects its own WhatsApp number |
We may also share information when the law requires it.
Information leaving South Africa
Kageflow's data is stored mainly in the European Union, where the GDPR gives protection substantially similar to POPIA. Where a provider processes information in another country, we rely on its binding data protection agreement, including standard contractual clauses, as section 72 of POPIA allows.
How we protect it
- All connections to Kageflow are encrypted, and stored data is encrypted at rest.
- Each dealership's records are kept separate from every other dealership's by rules in the database itself.
- Inside a dealership, private details such as ID numbers, finance information and vehicle costs are visible only to the roles that need them.
- Changes to key records are logged, and the database is backed up daily.
If we believe personal information has been accessed by someone who should not have it, we will tell the affected dealership straight away, and notify the Information Regulator and the people affected as POPIA requires.
How long we keep it
We keep account information while your account is active. When a dealership stops using Kageflow, it can export its data, after which we delete it within 60 days, apart from backups, which expire on their normal cycle, and anything the law requires us to keep. Emails about demos are deleted after 2 years if nothing comes of them.
Your rights
Under POPIA you can ask us to:
- tell you whether we hold personal information about you, and give you a copy;
- correct or delete information that is wrong, out of date or held without a lawful reason;
- stop using your information for a purpose you object to, including direct marketing.
Email hello@kageflow.co.za. These requests are free, and we will reply within 30 days. If your information was entered by a dealership, we will pass your request to them and help them answer it.
If you are not happy with how we handle your information, you can complain to the Information Regulator through its eServices portal, or email enquiries@inforegulator.org.za.
Changes
If we change this policy, we will update the date at the top. If a change affects how we use information already in Kageflow, we will email the dealerships that use it first.