Last updated: June 2026
This Privacy Policy explains how The BVL ("we", "us", "our") collects, uses, and protects your personal information when you use ProofPack. We are committed to compliance with the Protection of Personal Information Act, 4 of 2013 (POPIA).
1. Who We Are
The responsible party (as defined by POPIA) is The BVL, South Africa. Contact: info@thebvl.com
2. What Information We Collect
Account information: Your email address and encrypted password when you create an account.
Device information: A randomly generated device identifier, your device name (derived from your browser or OS), and the date your device last connected.
Report content: The job reports, photos, notes, client names, and business information you create within the app. This data belongs to you.
Usage data: Basic analytics such as features used and error logs, used to improve the Service. This data is not linked to individual reports.
3. How We Use Your Information
We use your information solely to:
- Provide and maintain the Service
- Sync your reports across your approved devices
- Send transactional emails (account confirmation, password reset)
- Enforce subscription limits (device count, report count)
- Comply with legal obligations
We do not sell, rent, or share your personal information with any third party for marketing or advertising purposes.
4. Your Clients' Data (POPIA)
When you enter your clients' names, addresses, or contact details into a report, you are the responsible party for that personal information under POPIA, and ProofPack acts as an operator on your behalf.
As the responsible party you are obligated to ensure you have a lawful basis for processing your clients' personal information and to respond to any access or deletion requests from those clients. ProofPack will support you in meeting those obligations by allowing you to export or delete your data at any time.
5. Where Your Data Is Stored
Reports and account data are stored in Supabase, a cloud database provider. Servers are located in the European Union (AWS eu-west-1). Supabase processes data on our behalf under a Data Processing Agreement that meets GDPR and comparable standards.
Your data is isolated from other users by row-level security policies enforced at the database layer. Neither ProofPack staff nor Supabase staff can read your report contents.
6. Data Retention
We retain your account data and reports for as long as your account is active. If you delete your account, all personal data is permanently removed from our servers within 30 days. Backups are purged within 90 days.
7. Your Rights Under POPIA
You have the right to:
- Access the personal information we hold about you
- Correct inaccurate personal information
- Request deletion of your personal information
- Object to processing of your personal information
- Lodge a complaint with the Information Regulator of South Africa
To exercise any of these rights, contact us at info@thebvl.com. We will respond within 30 days.
8. Cookies & Local Storage
ProofPack stores your reports and settings in your browser's local storage so the app works offline. This data never leaves your device except when syncing to your own cloud account. We do not use advertising cookies or ghird-party tracking scripts.
9. Children
ProofPack is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you by email or in-app notice at least 14 days before material changes take effect.
11. Contact
Privacy enquiries: info@thebvl.com
Information Regulator (South Africa): inforegulator.org.za