1. Who we are
Tincakes ERP is provided by Dynamissimo cc, trading as Dynamic Computer Services ("DCS", "we", "us"), registration number 1998/053580/23, Atlas Road Banking Centre, corner of Atlas and Dunswart Roads, Anderbolt, Boksburg, 1459. Our Information Officer is Izak van den Berg. Contact: support@dyncomp.co.za or 011 740 2662.
2. Information about you (we're the responsible party)
When you ask for access, or when you or your team use the app, we collect:
- Access requests: when you ask for access, your name, business name, email, phone number, area and any reseller code or message you add, so we can check your request and set up your business.
- Account details: name, email address and sign-in details (including Google sign-in, if used).
- Business details: your business name and who is on your team.
- Subscription and billing records: plan, payment status, dates and the Paystack references for your payments. We never receive or store your full card details.
- Agreement records: which version of the terms and this policy you agreed to, and when.
- Support messages you send us.
- Basic technical information, such as browser type and pages used, so the app works and stays secure.
We use it to provide and secure the app, manage your subscription and billing, support you, tell you about important changes, and meet our legal obligations. We don't sell it, and we don't use it for third-party advertising.
3. Your clients' information (you're the responsible party, we're your operator)
The client names, phone numbers, email addresses, notes and orders you capture belong to your business. Under POPIA you are the responsible party for that information and we process it as your operator. This section is the written agreement POPIA section 21 requires between us. We will:
- only process it to run the app for you, back it up and support you, and never for our own purposes;
- keep it confidential, and make sure our staff and service providers do too;
- keep reasonable technical and organisational security measures in place (POPIA section 19);
- tell you without undue delay if we believe someone has accessed it without authorisation, so you can meet your own notification duties;
- help you respond to your clients' requests to see, correct or delete their information;
- return or delete it when your subscription ends, as set out in our Terms of Service (section 7).
You are responsible for having a lawful reason to collect your clients' details and for telling them how you use them.
4. Who we share information with
We share information only with the service providers that help us run the app, and only so they can do that work:
- a cloud hosting provider, which hosts the app, stores its data and handles sign-in;
- a payment provider (Paystack), which processes subscription payments;
- an email delivery provider, which sends account and billing emails.
We may also share information where the law requires, or to protect our rights or someone's safety. To find out which companies we use at any time, contact us.
5. Where information is stored
Our cloud hosting provider currently stores the app's data on servers in the United States. When information leaves South Africa, we take reasonable steps to make sure the provider protects it to a standard similar to POPIA's (POPIA section 72).
6. How long we keep it
- Billing records: 5 years, because the law requires it.
- Your business data, including your clients' details: while your subscription is active, then 90 days for you to request a copy, then deleted.
- Account details and agreement records: while your account is open, and 12 months after it closes, unless you ask us to delete them sooner and the law allows it.
- Support messages: 2 years.
- Access requests that we decline: 90 days, then deleted. Approved requests are kept with your account details.
7. Your rights
Under POPIA you can ask us to tell you what personal information we hold about you, correct it, delete it where we no longer need it, or stop using it for a purpose you object to. Contact us to make a request; we may need to confirm who you are first. If you're unhappy with how we've handled your information, you can complain to the Information Regulator at inforegulator.org.za.
8. Security
We use secure sign-in, encrypted connections and access controls. Each business can only see its own data. No online service can promise perfect security, so tell us straight away if you think your account has been compromised.
9. Cookies
We use only the cookies and browser storage needed to keep you signed in and remember app settings (such as dark mode). We don't use advertising cookies.
10. Changes
We may update this policy. For important changes we'll tell you by email or in the app at least 30 days before they apply. The version and date are shown at the top.