Privacy Policy
Opex Prime Mobile Application
Quick Summary
- We collect only the data necessary to provide our services
- Your data is encrypted and stored securely in South Africa
- We never sell your personal information to third parties
- You have full rights to access, correct, or delete your data
Introduction
ISG ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Opex Prime mobile application ("App"). Please read this privacy policy carefully. By using the App, you consent to the practices described in this policy.
This policy complies with the Protection of Personal Information Act (POPIA) of South Africa and the General Data Protection Regulation (GDPR) where applicable.
Information We Collect
2.1 Personal Information
When you use our App, we may collect the following personal information:
- Account Credentials: Username, email address, and password for authentication purposes
- Profile Information: Your name, user ID, role, and profile picture
- Contact Information: Email address for account recovery and notifications
2.2 Device Information
- Device Identifiers: Firebase Cloud Messaging token for push notifications
- Network Information: IP address for connection management
- App Version: To ensure you have the latest updates and security patches
2.3 Location Data
With your explicit permission, we collect precise GPS location data (latitude and longitude) when you use features that require location services, such as geolocation form controls. Location data is only collected when you actively use these features and grant permission.
2.4 Media and Files
- Camera: Photos and videos captured through the App when you use camera features for form submissions
- Files: Documents and files you choose to upload or attach to forms
- Signatures: Digital signatures captured for form authorizations
2.5 Usage Data
- Form Submissions: Data entered into business process forms
- Activity History: Your activity timeline within the application
- Chat Messages: Messages sent through the in-app messaging feature
How We Use Your Information
We use the information we collect for the following purposes:
Data Storage and Security
4.1 Data Transmission
All data transmitted between the App and our servers is encrypted using HTTPS (TLS/SSL) protocols. We do not allow unencrypted (HTTP) connections in production environments.
4.2 Local Storage
Sensitive data stored locally on your device, such as authentication tokens, is encrypted using AES-256 encryption. The App may also store offline data in a local database to enable functionality when you don't have an internet connection.
4.3 Server Storage
Your data is stored on secure servers located in South Africa. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
Third-Party Services
We use the following third-party services:
Firebase Cloud Messaging (Google)
We use Firebase Cloud Messaging to deliver push notifications to your device. This service requires a device token to identify your device for notification delivery. Google's privacy policy applies to this service: https://policies.google.com/privacy
We do not sell, trade, or otherwise transfer your personal information to third parties for marketing purposes.
Data Sharing
We may share your information in the following circumstances:
Within Your Organization
Data you submit through forms may be accessible to authorized users within your organization based on their role and permissions
Service Providers
With trusted service providers who assist in operating the App, subject to confidentiality agreements
Legal Requirements
When required by law, court order, or governmental authority
Business Transfers
In connection with a merger, acquisition, or sale of assets, with appropriate notice
Your Rights
Under POPIA and GDPR, you have the following rights:
Right to Access
Request a copy of your personal information
Right to Rectification
Request correction of inaccurate personal information
Right to Erasure
Request deletion of your personal information
Right to Restrict
Request limitation of how we process your data
Right to Portability
Request your data in a machine-readable format
Right to Object
Object to processing of your personal information
Withdraw Consent
Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us using the details provided below.
App Permissions
The App requests the following permissions on your device:
| Permission | Purpose |
|---|---|
Internet |
Connect to our servers and synchronize data |
Camera |
Capture photos and videos for form attachments |
Location |
Record GPS coordinates when using geolocation features |
Storage/Media |
Access files for upload and save downloaded content |
Notifications |
Receive push notifications about tasks and messages |
You can manage these permissions through your device's settings at any time. Disabling certain permissions may limit the functionality of the App.
Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. When you log out of the App, your local session data and authentication tokens are cleared. Server-side data retention is determined by your organization's policies and applicable legal requirements.
Children's Privacy
The App is intended for use by adults in a business/enterprise context. We do not knowingly collect personal information from children under 18 years of age. If we become aware that we have collected personal information from a child, we will take steps to delete such information.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal information, please contact us:
ISG (Pty) Ltd
Information Officer
In accordance with POPIA, you may lodge a complaint with our Information Officer or the Information Regulator if you believe your personal information has been processed in violation of your rights.
Information Regulator (South Africa)