Privacy Policy & POPIA

Last updated: July 2026 · Applies to klikr.tech and related services

Klikr ("we", "us") operates an enterprise notification platform for organisations in South Africa. This Privacy Policy sets out how we collect, use, store, and protect personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA).

Responsible party

Klikr provides web push notification delivery and referral attribution tools to South African businesses and their teams. For privacy enquiries, contact hello@klikr.co.za.

Information we collect

• Business accounts: business name, email address, password (hashed), optional profile image and website URL.
• Staff accounts: staff ID, display name, password (hashed), created by the business owner.
• Customer / subscriber data: name, phone number, push subscription tokens, which staff or business link they used, and signup date.
• Technical data: browser push endpoints, service logs, and basic usage needed to deliver notifications.

Purpose of processing

• To create and manage business and staff accounts
• To deliver web push notifications on behalf of businesses
• To attribute customer signups to staff referral links
• To provide dashboards, analytics, and support
• To comply with legal obligations

Lawful basis (POPIA)

We process data based on consent (push notifications and customer signup), contractual necessity (providing the service to businesses), and legitimate interest (security, fraud prevention, and service improvement).

Data access and disclosure

Business owners may access their own subscribers and marketing leads. Staff may access only leads attributed to their referral link. We do not sell personal information or use it for third-party advertising.

Data storage & security

Data is stored on encrypted infrastructure (Vercel KV / cloud providers). Passwords are hashed. Sessions use HttpOnly cookies. We use HTTPS for all traffic.

Retention

We keep account and subscriber data while the business uses Klikr. Businesses may request deletion of subscriber records. Inactive accounts may be removed after reasonable notice.

Data subject rights

Under POPIA you may request access, correction, or deletion of your personal information. Customers should contact the business they signed up with. Account holders can delete their business account from Dashboard → Settings, or email hello@klikr.co.za.

Cross-border transfers

Some infrastructure providers may process data outside South Africa. We use providers with appropriate safeguards and only where necessary to operate the service.

Cookies

We use essential cookies for login sessions. Push notifications require browser permission, not cookies.

Children

Klikr is intended for businesses. We do not knowingly collect data from persons under 18 without appropriate consent.

Changes

We may update this policy. Material changes will be posted on this page with an updated date.