Privacy Policy

This Privacy Policy explains how ALTRANC HOLDINGS (Pty) Ltd handles personal information in connection with AltraNC Connect. It is intended to support transparent processing, including under South Africa’s Protection of Personal Information Act, 2013 (“POPIA”), where applicable.

1. Our role

For account, billing, security and support information, ALTRANC generally determines why and how information is processed and may act as the responsible party. For event payloads, webhook data, push-notification data or end-user information submitted by a customer through its projects, ALTRANC may act as an operator processing information on the customer’s instructions.

2. Information we may process

• Account information such as name, username, email address and authentication records.
• Project configuration, API credential metadata, channels, webhook configuration and push-provider configuration.
• Usage, delivery, retry, audit, security and operational logs.
• Billing and transaction-related information where paid services are used.
• Support communications and information voluntarily provided to us.
• Customer-controlled event payloads, identifiers, device tokens and related data necessary to provide realtime, webhook or push functionality.
• Technical information such as IP address, browser or device information, timestamps and request metadata where reasonably necessary for security and service operation.

3. Why we process information

We may process information to create and secure accounts, authenticate users, provide requested platform functionality, deliver messages and webhooks, process push notifications, enforce limits, operate billing, prevent abuse, investigate failures, provide support, comply with legal obligations and improve service reliability.

4. Lawful processing

Where applicable, processing is based on performance of a contract, legitimate operational and security interests, compliance with legal obligations, consent where required, or another lawful basis available under applicable law. Customers remain responsible for establishing a lawful basis for personal information they submit concerning their own users or recipients.

5. Service providers and recipients

We may use vetted infrastructure, email, identity, payment, monitoring, communications and push-notification providers where necessary to operate AltraNC Connect. Information is shared only as reasonably required for the relevant service, security requirement, legal obligation or authorised customer instruction.

6. Cross-border processing

Cloud and third-party services may process information in countries outside South Africa. Where cross-border processing occurs, we seek to use appropriate contractual, technical or legal safeguards as required by applicable law.

7. Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, contractual requirements, security, dispute resolution, backups and legal obligations. Different data categories may have different retention periods, including project-configured retention for persisted realtime events.

8. Security

We use reasonable technical and organisational safeguards designed to protect information, which may include transport encryption, access controls, credential hashing, scoped keys or tokens, logging and operational controls. No online service can guarantee absolute security, and customers are also responsible for protecting their own accounts, systems and secrets.

9. Your choices and rights

Subject to applicable law, individuals may have rights to request access to personal information, correction, deletion, restriction or objection, and to raise concerns about processing. Some requests relating to data controlled by an AltraNC Connect customer should be directed to that customer because the customer determines the purpose of that processing.

10. POPIA complaints

Where POPIA applies, you may have the right to lodge a complaint with the Information Regulator of South Africa. We encourage you to contact us first so that we can try to resolve the concern.

11. Cookies and similar technologies

AltraNC Connect uses browser storage and cookies where needed for sessions, CSRF protection, authentication, security and connected identity services. See the Cookie Notice for more information.

12. Children

AltraNC Connect is a developer and business infrastructure service and is not directed to children. Customers must ensure that any use involving minors complies with applicable law and appropriate consent requirements.

13. Changes

We may update this Policy as the service or legal requirements change. The effective date above will be updated when material revisions are made.

14. Contact

Privacy requests may be directed to ALTRANC HOLDINGS (Pty) Ltd through the contact channels published on the ALTRANC website or made available within AltraNC Connect.