Privacy policy

Massive Operations (Pty) Ltd, trading as Massive Operations, is a South African company providing software and digital services. Our company registration number is K2025535844. Our website is www.massiveoperations.co.za. You can contact us at support@massiveoperations.co.za or legal@massiveoperations.co.za. Our telephone number is 0624079139.

Depending on how you use our website and services, we may collect:

• Enquiry information, including your name, email address, phone number, company, service type, budget, timeline, project description, and attachments.
• Account and authentication information, including your name, email address, password credentials, verification status, and information from Google or Microsoft when you use social sign-in.
• Client portal information, including organisations, projects, tasks, files, deliverables, messages, notes, tickets, quotes, invoices, subscriptions, and related activity records.
• Technical and security information, including IP address, browser and device information, user agent, session data, logs, and error reports.
• Payment and billing information needed to manage invoices and subscriptions. Paystack processes payment card details; Massive Operations does not store card details.

Project enquiry uploads are limited to PDF, PNG, JPG/JPEG, and SVG files, with a maximum of 7 MB per file and 15 MB total per upload request. Uploads are validated and scanned before processing.

We use personal information to:

• Respond to enquiries and prepare or perform agreements with you
• Create and manage accounts, organisations, projects, and portal access
• Deliver services, store project materials, and provide support
• Send operational emails, including confirmations, invitations, invoices, security notices, and service notifications
• Process payments, subscriptions, refunds, and billing administration
• Secure the website and portal, prevent abuse, and investigate incidents
• Monitor errors and improve reliability and service quality
• Meet legal, accounting, regulatory, and dispute-resolution obligations

We do not currently send marketing or newsletter emails. We do not use your information for automated decision-making or profiling.

We process information where necessary to respond to your request, enter into or perform a contract, operate and secure our services, comply with legal obligations, or pursue legitimate interests that do not override your rights. Where consent is required, including for optional analytics, we ask for it and you may withdraw it.

Where we process personal information on a client's instructions, we act as an operator under the Protection of Personal Information Act 4 of 2013 (POPIA). The client remains responsible for having the necessary permissions to provide that information to us.

We do not sell, rent, or trade personal information. We share information only with providers needed to operate the business and provide the services:

• Vercel and GoDaddy for hosting and infrastructure
• Neon/Postgres for application data storage
• Upstash Redis for sessions, caching, rate limiting, and supporting services
• Resend for operational email delivery
• Cloudinary for project and enquiry file storage
• Sentry for error monitoring and diagnostics
• Google and Microsoft for optional account authentication
• Paystack for payment and subscription processing
• Cloudflare for security and network protection
• Vercel Analytics for optional, consent-based usage analytics

We may also disclose information where required by law, to courts or regulators, or to establish, exercise, or defend legal claims. Providers process information under their own privacy policies and may process it outside South Africa.

Some service providers process information outside South Africa. We take reasonable steps to use providers and contractual arrangements that provide appropriate protection, and transfers may also be necessary to perform a contract or provide a service you requested. You may contact us to ask which providers process your information and where.

We retain information for as long as needed to provide the service, maintain an active account or engagement, meet legal and accounting requirements, resolve disputes, and protect our services.

After a project or client relationship ends, or where a client account and related data becomes inactive, we generally retain client accounts, project records, uploaded files, invoices, and portal messages for up to 60 days before deletion or access closure. We may retain limited records for longer where required by law, necessary for security, accounting, fraud prevention, or the establishment or defence of legal claims.

We use essential local storage and cookies to keep the website and portal working, maintain sessions, and remember cookie preferences. Optional Vercel Analytics is enabled only after you consent. You can review and change preferences at any time on our Cookie Policy page.

We use reasonable technical and organisational measures to protect information against unauthorised access, loss, misuse, alteration, or disclosure. No internet transmission or storage system is completely secure. Where POPIA requires notification of a security compromise that creates a real risk of harm, we will notify the Information Regulator and affected people as required.

Subject to applicable law, you may have the right to:

• Ask what personal information we hold about you and request a copy
• Request correction or deletion of inaccurate or unlawfully held information
• Object to or request restriction of certain processing
• Withdraw consent where processing relies on consent
• Object to direct marketing, if we introduce it in the future
• Request your information in a structured, machine-readable format where applicable

To exercise your rights, email legal@massiveoperations.co.za. We may need to verify your identity before responding.

If you are not satisfied with how we handle your personal information, contact us first at legal@massiveoperations.co.za. You may also complain to the Information Regulator of South Africa through inforegulator.org.za.

Our website may link to third-party websites and services. Those websites have their own privacy policies, and we are not responsible for their content or privacy practices.

We may update this Privacy Policy when our services, providers, or legal obligations change. We will post the updated version with a revised date. Where a change materially affects active clients, we may communicate it by email.

For privacy questions, requests, or complaints, contact Massive Operations at legal@massiveoperations.co.za. For general support, email support@massiveoperations.co.za. Our telephone number is 0624079139.