DivePMS

Privacy notice

This notice is for the DivePMS website and licence service under the Protection of Personal Information Act 4 of 2013 (POPIA). The responsible party is Pieter du Toit, a sole proprietor trading as DivePMS, 11 Dahlia Avenue, Velddrif, Western Cape, 7365, South Africa. Information officer: Pieter du Toit, hello@getsiteready.co.za, 081 459 4741.

What the server holds

The server stores only what it needs to run the account, the bill, and the licence:

  • Account: company name, email address, and a password hash.
  • Billing: plan, founding offer, PayFast subscription token, payment references, and paid-through dates.
  • Licence: device id, a name you give the computer, activation time, and a hash of the refresh secret.

Plant data, photographs, checklist text, and the names of people on work orders stay on your PC and your LAN. They are not uploaded to create an account or to refresh a licence.

Why we process it

We process this information to open the trial, authenticate you, issue licence tokens, take or cancel a subscription, and answer a support email you send. The lawful bases are the contract with you and our legitimate interest in running a paid licence without holding your plant records.

Processors and section 72

These operators process account data for us:

  • Vercel (hosting) and Neon (Postgres database), in the United States.
  • Resend (email), in the European Union.
  • PayFast (card and subscription payments), in South Africa.

The United States is not treated as having an adequate level of protection under POPIA. The transfer to Vercel and Neon is made under section 72: it is required to perform the hosting contract, and those processors are bound by written terms that require them to protect the information and to notify us of a compromise. Resend is used so that password-reset and payment emails can be delivered. You can ask for a copy of the relevant safeguards by writing to hello@getsiteready.co.za.

Retention

Account and billing records are kept while the account is open and for as long as tax and consumer law require after it closes. Device rows are kept after you deactivate a computer so the audit of who was activated remains, but a deactivated computer cannot refresh a licence. Password-reset tokens expire after one hour.

Your rights

You may ask to see, correct, or delete the account information we hold, or to object to processing, by writing to hello@getsiteready.co.za. Deleting the account does not delete the plant file on your PC. You may lodge a complaint with the Information Regulator, South Africa (https://inforegulator.org.za).

This notice covers the licence service only. It will be updated before any future feature stores plant data or photographs on the server.