Privacy notice

1. Who we are

Roviraq (“we”, “us”) provides workforce compliance and client audit software for South African security companies. To confirm: registered legal entity name, registration number and physical address.

Information Officer: To confirm: name and contact details of the Information Officer registered with the Information Regulator. Privacy questions: To confirm: privacy@roviraq.app (or another monitored mailbox).

2. What this notice covers

This notice covers the public website at roviraq.app and its two forms: the demo request and the founding-pilot application.

Information that customers store in the Roviraq application itself (for example employee records and compliance documents) is processed on the customer's behalf under a separate customer agreement. To confirm: customer data processing terms (Roviraq acting as operator for the customer as responsible party).

3. What we collect

Only what the forms ask for:

• name, company, work e-mail address and phone / WhatsApp number;
• your role (demo request);
• approximate number of employees/guards and of client sites (as ranges);
• what you choose to tell us about your current audit process, how often clients request audit packs, and your biggest challenge (pilot application);
• your consent to be contacted about the request, and whether you opted in to product updates;
• if you arrived through a campaign link, the campaign source, medium and name.

We do not ask for identity numbers, payment details or employee information through the website. We do not store your IP address with your request; our hosting provider may keep short-lived technical logs to operate and protect the service. To confirm: hosting provider log retention period.

4. Why we use it

• to respond to your request and arrange a demonstration;
• to discuss whether the founding pilot fits your company, and its scope;
• to keep a record of the request and our correspondence;
• to send occasional product updates — only if you ticked the separate opt-in box. You can unsubscribe at any time.

We rely on your consent (the contact tick box) and our legitimate interest in responding to enquiries. To confirm: lawful-basis wording reviewed by a legal adviser.

5. Who we share it with

We do not sell personal information. We use service providers (operators) to run the website and handle requests:

• database and storage hosting (Supabase) — To confirm: hosting region;
• website hosting — To confirm: hosting provider and region;
• e-mail delivery for internal request notifications — To confirm: e-mail provider, if enabled;
• customer-relationship tooling — To confirm: CRM or other tool, if one is connected.

6. Transfers outside South Africa

Some providers may process information outside South Africa. Where they do, we rely on the safeguards POPIA requires for cross-border transfers. To confirm: where each provider stores data, and the section 72 basis relied on.

7. How long we keep it

To confirm: retention period — for example, 24 months after our last contact unless you become a customer, after which the customer agreement applies.

8. How we protect it

Requests are stored in a private database table that cannot be read through any public interface, are transmitted over encrypted connections (HTTPS), and are accessible only to the Roviraq team members who handle enquiries.

9. Your rights

You may ask what information we hold about you, ask us to correct or delete it, object to its use, or withdraw your consent, by contacting us at the address above. If you are not satisfied with our response, you may complain to the Information Regulator (South Africa): inforegulator.org.za.

10. Cookies

The public website does not set analytics or advertising cookies. Signing in to the Roviraq application uses essential session cookies only. To confirm: update this section if an analytics tool is added.

11. Changes

We will update this notice if how we handle information changes, and show the date of the latest version above.