Privacy Policy

1. Introduction

Perceptix develops and operates technology solutions that support public safety awareness and construction site security. Our products process information, including personal information, in order to deliver the features described in this Policy.

This Policy applies to:

• EchoGuard Construction Site Platform – a business-to-business software-as-a-service platform used by construction companies, contractors, developers, municipalities and security companies. The platform integrates with customer-owned CCTV cameras to support site security, safety monitoring and operational oversight.
• EchoGuard Mobile Application – a consumer mobile application available on Android and iOS that provides public safety information, crime statistics, emergency information, area insights and related safety features, including (where legally permitted) searches relating to wanted persons.
• Our website and any other online services we operate that link to this Policy.

By using our services, creating an account, or otherwise providing personal information to us, you acknowledge that you have read and understood this Policy.

2. Definitions

In this Policy, unless the context indicates otherwise:

“Personal information” means information relating to an identifiable, living natural person and, where applicable, an identifiable existing juristic person, as defined in section 1 of POPIA.

“Processing” means any operation or activity concerning personal information, including collection, receipt, recording, organisation, storage, updating, retrieval, use, dissemination or destruction.

“Responsible Party” means the party that determines the purpose of and means for processing personal information.

“Operator” means a person who processes personal information for a Responsible Party in terms of a contract or mandate, without coming under the direct authority of that party.

“Data subject” means the person to whom personal information relates.

“Special personal information” has the meaning given in section 26 of POPIA and includes information concerning religious or philosophical beliefs, race or ethnic origin, trade union membership, political persuasion, health or sex life, biometric information, or criminal behaviour.

3. Who We Are

Perceptix (Pty) Ltd is a private company registered in the Republic of South Africa. We specialise in AI-supported security and data analytics solutions.

Registered name: Perceptix (Pty) Ltd

Country of registration: South Africa

Email: support@perceptix.co.za

Privacy enquiries: legal@perceptix.co.za (or the contact details published on our website or within the relevant application)

For the purposes of POPIA, Perceptix is the Responsible Party in respect of personal information that we determine the purpose and means of processing for, including information collected through the EchoGuard Mobile Application and our website. In respect of CCTV footage and related site data processed through the EchoGuard Construction Site Platform on behalf of a business customer, that business customer is ordinarily the Responsible Party and Perceptix acts as Operator.

4. Scope of this Policy

This Policy applies to all personal information processed by Perceptix in connection with the products and services listed above. It does not apply to third-party websites, applications or services that may be linked from our platforms, which are governed by their own privacy policies.

Business customers who use the EchoGuard Construction Site Platform remain responsible for ensuring that their own collection and use of personal information (including footage from cameras they control) complies with POPIA and any other applicable laws. This Policy describes how Perceptix processes information in its capacity as service provider.

5. Information We Collect

The categories of information we collect depend on which product or service you use and how you interact with us. We collect only what is reasonably necessary for the purposes described in this Policy.

5.1 Personal Information

Depending on the service, this may include:

• Full name, email address, mobile telephone number and other contact details
• Account login credentials and profile information
• Company name, registration details, business address and authorised user details (for business accounts)
• Communications you send to us (support requests, feedback or correspondence)
• Any other information you choose to provide when using our services

5.2 Device Information

When you use the EchoGuard Mobile Application or access our website, we may automatically collect:

• Device type, operating system and version
• Unique device identifiers and advertising identifiers (where applicable)
• Browser type and version
• IP address and approximate network location
• App version, crash logs and diagnostic data

5.3 Location Information

With your permission, the EchoGuard Mobile Application may collect precise or approximate location data to provide area-based safety information, crime statistics relevant to your vicinity, and related features. You may disable location services through your device settings; certain features may then be limited or unavailable.

5.4 Camera Permissions

The EchoGuard Mobile Application may request access to your device camera to enable features such as scanning, object recognition or plate recognition where those features form part of the service. Camera access is used only for the specific functionality you invoke and is not used for continuous background recording. You may revoke camera permission at any time in your device settings.

5.5 Photos and Media

If you upload or capture images or other media through the application (for example, for recognition features or support purposes), those items are processed solely for the purpose for which they were provided. We do not use uploaded media for unrelated marketing or profiling purposes.

5.6 Usage Information

We collect information about how you interact with our services, including:

• Features used, screens viewed and actions taken within the application or platform
• Date, time and duration of sessions
• Search queries and filter selections within the service
• Performance and error data

5.7 Account Information

When you create an account we collect the information necessary to establish and secure that account, including authentication credentials and any profile details you elect to provide. Business accounts may include details of authorised users and organisational structure.

5.8 Payment Information

Subscription and other payments are processed by third-party payment service providers (currently including Ozow and Paystack). Perceptix does not store full card numbers or bank account details. We receive limited transaction information (such as payment confirmation, amount, date and partial card identifiers where provided by the processor) necessary for billing, accounting and fraud prevention.

5.9 Business Customer Information

For the EchoGuard Construction Site Platform we collect company and contact details of the contracting entity, authorised administrators, billing information and configuration data necessary to provision and support the service.

5.10 CCTV and Video Data (Construction Platform)

The EchoGuard Construction Site Platform processes video streams and related data originating from cameras owned or controlled by the business customer. In this context:

• The business customer is the Responsible Party in respect of the personal information contained in the footage and related site data. The customer determines the purposes of monitoring, the placement of cameras, retention periods under its control, and the lawful basis for processing under POPIA.
• Perceptix acts as Operator. We process the footage and derived data solely on the customer’s documented instructions and for the purpose of providing the contracted platform features (including AI-supported detection, alerting and analytics where enabled).
• Perceptix does not use customer CCTV footage for its own independent purposes, does not sell such footage, and does not make it available to third parties except as instructed by the customer or as required by law.

Business customers are responsible for ensuring that appropriate notices are displayed at monitored premises and that any required authorisations or impact assessments under POPIA have been completed.

5.11 AI Processing

Certain features of our services make use of artificial intelligence and machine learning models. These may include computer vision models that analyse images or video frames for objects, faces, vehicle number plates or other visual attributes, as well as models that support statistical analysis of publicly available or customer-provided data.

AI processing is performed to deliver the specific functionality you or the business customer have enabled. Models are applied to the data submitted for a given request or stream; we do not use customer data to train public foundation models or to create generalised datasets that leave our control without a lawful basis and appropriate safeguards.

Where AI outputs involve personal information (for example, a match against a legally authorised database), those outputs are treated as personal information and are subject to the same protections described in this Policy.

6. How Information Is Collected

We collect information in the following ways:

• Directly from you – when you register, update your profile, make a payment, contact support, or use interactive features.
• Automatically – through device sensors, application logs, cookies and similar technologies when you use our website or applications.
• From business customers – when they configure the Construction Site Platform, invite users, or stream camera data.
• From third parties – such as payment processors (transaction confirmations), public or licensed data sources used for crime statistics or authorised search features, and analytics providers, in each case only where a lawful basis exists.

7. Why We Process Information and Legal Basis

Under POPIA, personal information may only be processed if a lawful justification exists. We rely on the following grounds, as applicable to the specific processing activity:

• Consent – where you have given free, specific and informed consent (for example, for location services, marketing communications, or optional camera access).
• Contract – where processing is necessary to perform a contract with you or the business customer, or to take steps at your request before entering into a contract (account creation, subscription delivery, platform access).
• Legitimate interests – where processing is necessary for our legitimate interests or those of a third party, and those interests are not overridden by your interests or fundamental rights (for example, service improvement, security, fraud prevention and analytics). We assess these interests carefully before relying on them.
• Legal obligation – where we are required to process information to comply with a law (tax, accounting, responding to lawful requests from authorities).
• Operator mandate – in respect of customer CCTV and site data, processing is carried out on the documented instructions of the business customer (Responsible Party).

8. How We Use Information

We use personal information for the following purposes:

• To create, maintain and secure user accounts
• To provide the features of the EchoGuard Mobile Application, including safety information, crime statistics, emergency information and authorised search functionality
• To provide the EchoGuard Construction Site Platform, including camera integration, detection, alerting and operational dashboards
• To process payments and manage subscriptions
• To communicate with you about service updates, support requests and administrative matters
• To monitor, maintain and improve the performance, security and reliability of our services
• To detect and prevent fraud, abuse and security incidents
• To comply with legal obligations and respond to lawful requests from authorities
• To send marketing communications where you have consented or where otherwise permitted by law (you may opt out at any time)

9. Data Sharing

We do not sell personal information. We share personal information only in the limited circumstances described below and only to the extent necessary.

9.1 Third Party Service Providers

We engage carefully selected service providers who assist us in operating our business. These may include:

• Payment processors (Ozow, Paystack and similar)
• Cloud infrastructure and hosting providers
• Analytics and performance monitoring providers
• Customer support and communication tools
• Security and anti-fraud service providers

These providers process personal information only on our instructions and are required by contract to implement appropriate security measures and to process information solely for the purposes we specify.

9.2 Cloud Storage

Our services are hosted on reputable cloud infrastructure. Data may be stored in data centres located in South Africa or in other jurisdictions that offer an adequate level of protection or where appropriate safeguards (such as standard contractual clauses or equivalent measures) have been implemented. See the section on International Data Transfers for further detail.

9.3 Analytics

We use analytics tools to understand how our services are used, to identify technical issues and to improve user experience. Where analytics involve personal information, the processing is limited to what is necessary and, where required, is based on consent or legitimate interests. Analytics data is aggregated or pseudonymised where practicable.

9.4 Government and Law Enforcement Requests

We may disclose personal information if required to do so by law, or if we believe in good faith that such disclosure is necessary to comply with a legal obligation, a court order, a warrant or a lawful request from a competent authority. We will, where legally permitted, notify the affected individual or business customer of such a request before disclosure.

10. International Data Transfers

Personal information may be transferred to, and processed in, countries outside the Republic of South Africa. Where we transfer personal information to a third country, we ensure that an adequate level of protection is in place, either because the country has been recognised as providing adequate protection or because appropriate safeguards (such as binding contractual clauses that impose POPIA-equivalent obligations on the recipient) have been implemented.

You may request further information about the safeguards we apply to international transfers by contacting us at the details provided at the end of this Policy.

11. Data Security Measures

We implement appropriate, reasonable technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:

• Encryption of data in transit and, where appropriate, at rest
• Access controls and authentication mechanisms
• Network and application security controls
• Regular security assessments and monitoring
• Staff training and confidentiality obligations
• Secure development practices and vulnerability management

No method of transmission or storage is completely secure. While we strive to protect personal information, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

12. Data Retention

We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by law. Retention periods vary according to the nature of the information and the purpose of processing.

In general:

• Account and profile information is retained for the duration of the account relationship and for a reasonable period thereafter to allow for reactivation, dispute resolution and legal compliance.
• Transaction and billing records are retained in accordance with applicable tax and accounting legislation.
• Usage and diagnostic logs are retained for periods necessary for security, debugging and service improvement, after which they are deleted or anonymised.
• CCTV footage and related site data processed on behalf of a business customer are retained in accordance with the retention settings configured by that customer or the terms of the applicable service agreement. Perceptix does not independently determine long-term retention of customer-controlled footage.

When personal information is no longer required, we take reasonable steps to destroy or de-identify it in a manner that prevents reconstruction.

13. Cookies (Website)

Our website may use cookies and similar technologies. Cookies are small text files placed on your device. We use:

• Essential cookies – necessary for the website to function and cannot be switched off.
• Performance and analytics cookies – to understand how visitors use the site and to improve performance.
• Preference cookies – to remember choices you make (language, region).

You can control cookies through your browser settings. Blocking certain cookies may affect website functionality. Further details about the specific cookies we use may be published in a separate cookie notice on our website.

14. Mobile App Permissions

The EchoGuard Mobile Application may request the following device permissions:

• Location – to provide location-relevant safety information.
• Camera – to enable scanning and recognition features.
• Storage / Photos – to allow selection or saving of images related to features you use.
• Notifications – to deliver alerts and service messages.
• Network access – required for the application to communicate with our servers.

Permissions are requested only when needed for a feature. You may grant or deny permissions and may change them later in your device settings. Denying a permission may limit the corresponding functionality.

15. Children's Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without appropriate consent or authority, we will take steps to delete that information. If you believe a child has provided us with personal information, please contact us.

16. User Rights under POPIA

As a data subject you have the following rights under POPIA, subject to the limitations and conditions set out in the Act:

• Right of access – to request confirmation of whether we hold personal information about you and to obtain a copy of that information.
• Right to correction – to request that inaccurate, incomplete or out-of-date personal information be corrected or deleted.
• Right to deletion / destruction – to request the destruction or deletion of personal information in certain circumstances.
• Right to object – to object, on reasonable grounds, to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent – where processing is based on consent, you may withdraw that consent at any time (without affecting the lawfulness of processing before withdrawal).
• Right to lodge a complaint – with the Information Regulator if you believe your rights have been infringed.

Information Regulator contact details:

JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

PO Box 31533, Braamfontein, Johannesburg, 2017

Complaints email: complaints.IR@justice.gov.za

General enquiries: inforeg@justice.gov.za

16.1 Access Requests

To request access to personal information we hold about you, please email privacy@perceptix.co.za (or the address published in the relevant application) with sufficient information to identify you and the records you seek. We may request additional verification to confirm your identity before releasing information. We will respond within the timeframes prescribed by POPIA.

16.2 Correction Requests

If you believe personal information we hold is inaccurate or incomplete, please contact us with details of the correction required. We will investigate and, where appropriate, correct the information and notify any third parties to whom we have disclosed it, where practicable.

16.3 Deletion Requests

You may request deletion of personal information in the circumstances provided for in POPIA (for example, where the information is no longer necessary for the purpose for which it was collected, or where consent has been withdrawn and there is no other lawful basis). We will assess the request and, if granted, take reasonable steps to delete or de-identify the information, subject to any legal retention obligations.

17. Marketing Communications

We may send you service-related communications that are necessary for the operation of your account. We will only send marketing or promotional communications where you have consented or where otherwise permitted by applicable law. You may opt out of marketing communications at any time by using the unsubscribe link in the message or by contacting us. Opting out of marketing does not affect service-related messages.

18. Data Breach Procedures

In the event of a security compromise involving personal information, we will take prompt steps to contain the incident, assess the risk to data subjects, and notify the Information Regulator and affected data subjects as required by section 22 of POPIA. Notifications will be made as soon as reasonably possible after we become aware of the compromise, taking into account the legitimate needs of law enforcement and measures necessary to determine the scope of the compromise.

19. Third Party Links

Our services may contain links to third-party websites, applications or resources. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policies of any third-party services you access.

20. Changes to this Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements or other factors. The version published on our website or within the relevant application is the current version. Material changes will be notified through the application, by email to the address associated with your account, or by other appropriate means. Continued use of our services after the effective date of a revised Policy constitutes acceptance of the updated terms for subsequent processing, to the extent permitted by law.

21. Contact Information

If you have questions about this Privacy Policy, wish to exercise your rights, or need to report a privacy concern, please contact us:

Perceptix (Pty) Ltd

AI Security & Data Analytics

Email: legal@perceptix.co.za

Support: support@perceptix.co.za

South Africa

This Privacy Policy should be read together with our Terms of Service and any product-specific terms. In the event of a conflict relating specifically to privacy and the processing of personal information, the provisions of this Policy will prevail.

— End of Privacy Policy —

Last updated 29 July 2026 · Questions? info@perceptix.co.za