Privacy Policy

1. Who we are

The Trade Kit is operated by DevCraft House. We provide quote, invoice, and job management software for South African tradespeople. For privacy queries, contact us at privacy@thetradekit.co.za.

2. Information we collect

Depending on how you use the service, we may process:

• Account data — name, email address, password (stored hashed), business name, phone, address, VAT number, trade type, and subscription tier.
• Business data you enter — customer names and contact details, quotes, invoices, jobs, line items, notes, banking details for invoices, and business logos you upload.
• Email sending settings — if you configure send-as email, we store SMTP credentials you provide so we can send quotes and invoices on your behalf. You must own and be authorised to use that mailbox.
• Team invites — email addresses of people you invite to your account.
• Payment data — subscription payments are processed by PayFast. We do not store your full card details; PayFast provides us with transaction references and subscription status.
• Technical data — IP address, browser type, device information, and usage data when you use the website or app. If you accept analytics cookies, we use Google Analytics to understand site usage (see our Cookie Policy).

3. How we use your information

We process personal information to:

• Create and manage your account and authenticate you.
• Provide quote, invoice, job, and customer management features.
• Send transactional emails (verification, password reset, team invites, document delivery).
• Process subscriptions and comply with billing records.
• Improve, secure, and troubleshoot the service.
• Comply with legal obligations applicable in South Africa.

We do not sell your personal information. We do not use your customer lists for our own marketing.

4. Lawful basis (POPIA)

Under the Protection of Personal Information Act 4 of 2013 (POPIA), we rely on one or more of: your consent, performance of a contract with you, compliance with law, and our legitimate interests in operating a secure SaaS product. See our POPIA Notice for more detail on your rights.

5. How long we keep data

• Account and business data — while your account is active and for a reasonable period after closure for backups, disputes, and tax/legal records.
• Email outbox logs — as needed to deliver messages and resolve delivery issues.
• Analytics — according to Google Analytics retention settings when enabled.

You may request deletion subject to legal retention requirements (e.g. tax records).

6. Sharing with third parties

We use service providers who process data on our behalf, including:

• Hosting and infrastructure providers (servers in or outside South Africa).
• Email delivery (SMTP providers you configure, and our system noreply mail).
• PayFast for payment processing.
• Google Analytics (only if you accept analytics cookies).

We require appropriate safeguards where personal information is transferred across borders, consistent with POPIA.

7. Security

We use technical and organisational measures including encryption in transit (HTTPS), hashed passwords, access controls, and secure hosting. No method of transmission over the internet is 100% secure; please use a strong password and keep your login details confidential.

8. Your rights

You may request access, correction, deletion, or restriction of your personal information, and object to certain processing where POPIA allows. Contact privacy@thetradekit.co.za. You may also lodge a complaint with the Information Regulator (South Africa).

9. Children

The Trade Kit is intended for business users and is not directed at children under 18.

10. Changes

We may update this policy from time to time. Material changes will be posted on this page with an updated date. Continued use after changes constitutes acceptance where permitted by law.

11. Contact

Privacy enquiries: privacy@thetradekit.co.za
General support: support@thetradekit.co.za