# Privacy Policy

**TrackedTalk** is a product of **Revyst (Pty) Ltd** (Reg: K2026479705)  
**Effective date:** 1 July 2026  
**Last updated:** 1 July 2026

---

## 1. Introduction

Revyst (Pty) Ltd ("we", "us", "our") is committed to protecting the personal information of all individuals who interact with TrackedTalk. This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the **Protection of Personal Information Act 4 of 2013 (POPIA)**.

By using TrackedTalk, you confirm that you have read and understood this policy.

---

## 2. Who This Policy Applies To

This policy applies to:

- **Platform users** — sales managers and sales representatives who access TrackedTalk on behalf of a client organisation
- **Data subjects** — individuals whose personal information is recorded within TrackedTalk, including contacts, leads, and customers of our client organisations

---

## 3. What Personal Information We Collect

We may collect and process the following categories of personal information:

**Platform users:**
- Full name and job title
- Work email address
- Login credentials (passwords are encrypted and never stored in plain text)
- Usage activity within the platform

**Contacts and leads recorded by platform users:**
- Full name
- Company name
- Phone number
- Call notes and interaction history
- Follow-up records and outcomes
- Call recordings (where the client organisation uses a VoIP or softphone system and has obtained the necessary consent from the relevant parties)

---

## 4. Why We Collect Personal Information

We collect and process personal information for the following legitimate purposes:

- To provide and operate the TrackedTalk platform
- To enable sales performance tracking for client organisations
- To maintain call logs, contact records, and follow-up schedules
- To generate performance reports and dashboards
- To provide technical support and resolve issues
- To communicate important platform updates to authorised users
- To comply with applicable legal obligations

We do not use personal information for direct marketing without explicit consent.

---

## 5. Call Recordings

Where client organisations use VoIP or softphone systems integrated with TrackedTalk, call recordings may be stored within the platform. 

**It is the sole responsibility of the client organisation to:**
- Inform all parties to a call that the call is being recorded
- Obtain the necessary consent in accordance with applicable South African law, including POPIA and the Regulation of Interception of Communications and Provision of Communication-Related Information Act (RICA)
- Comply with all legal requirements regarding call recording in their jurisdiction

Revyst (Pty) Ltd acts as an operator in respect of call recordings and processes them only on the documented instruction of the client organisation as responsible party.

---

## 6. How We Store and Protect Personal Information

- All data is stored on secure cloud infrastructure provided by Supabase
- Data is encrypted in transit using TLS and at rest
- Access to personal information is restricted to authorised platform users through role-based access controls
- Manager notes and sensitive performance data are only accessible to users with the appropriate access level
- We retain personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law

---

## 7. Who We Share Information With

We do not sell, rent, or trade personal information to third parties.

We may share personal information with the following categories of service providers solely to operate the platform:

- **Supabase** — database hosting and authentication
- **Resend** — transactional email delivery
- **Lovable** — application hosting infrastructure

All third-party providers are contractually required to process personal information only as instructed and to maintain appropriate security measures.

---

## 8. Responsible Party and Operator Relationship

In respect of personal information processed within TrackedTalk:

- The **client organisation** is the **responsible party** — they determine the purpose and means of processing personal information within their TrackedTalk account
- **Revyst (Pty) Ltd** acts as the **operator** — we process personal information on behalf of and under the instruction of the client organisation

Client organisations are responsible for ensuring their use of TrackedTalk complies with POPIA and any other applicable legislation.

---

## 9. Your Rights Under POPIA

As a data subject you have the right to:

- Request access to the personal information we hold about you
- Request correction of inaccurate or incomplete personal information
- Request deletion of your personal information, subject to legal retention requirements
- Object to the processing of your personal information
- Lodge a complaint with the **Information Regulator of South Africa**

To exercise any of these rights, contact us at: **info@revyst.com**

---

## 10. Cookies

The TrackedTalk platform uses only essential session cookies required for authentication and platform functionality. We do not use advertising or tracking cookies.

---

## 11. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify active platform users via email. Continued use of TrackedTalk after changes are published constitutes acceptance of the updated policy.

---

## 12. Contact Us

For any privacy-related queries or requests:

**Revyst (Pty) Ltd**  
Email: info@revyst.com  
Website: www.revyst.com  
Reg: K2026479705  
Pretoria, South Africa
