Privacy Policy

This policy explains how Nexbridge Technologies (“we”, “us”) handles personal information on Nexbridge SmartCard (app.nexsmart.co.za). We follow the Protection of Personal Information Act, 2013 (POPIA).

1. Who is responsible

For the information of people who create an account with us, Nexbridge Technologies is the responsible party. When a visitor sends a message, books a service or places an order through someone’s card, that card owner decides why the information is collected and is the responsible party for it; we process it on their behalf as an operator. Our Information Officer is Trevor Ndlovu, trevor@nexbridge.co.za.

2. What we collect

From account holders:

• Name, email address, phone number and a password (stored in hashed form by our authentication provider, never in readable form).
• The content you put on your card: job title, business name, description, links, social handles, photos, logos, services and products.
• Your plan and its payment status. Card and instant-EFT payments are handled by PayFast; we receive confirmation and a reference, never your card number. For manual EFT we see the payment reference and amount on our own bank statement.

From visitors who use a card:

• Leads: the name, email, phone number and message the visitor chooses to send.
• Bookings and orders: the name, phone number, email, chosen service or items, date and time, and any notes the visitor adds.
• Basic usage figures such as how often a card is viewed or a button is used, which the card owner sees as insights.

Technical data: like most websites, our servers record the IP address, browser type and the pages requested, for security and troubleshooting.

3. Why we use it

• To provide the service: create and show your card, deliver leads, bookings and orders to the card owner, and send related notifications.
• To take payment and manage your plan.
• To keep the service secure, prevent abuse, fix problems and make backups.
• To meet legal obligations, and to answer your questions and requests.
• To contact you about your account and the service. We do not sell personal information, and we do not use it for advertising.

4. Who we share it with

We use these service providers, who may process personal information for us:

• Supabase – database and sign-in (servers in the European Union, Ireland).
• Hetzner – server hosting (Finland).
• Resend – sending email notifications.
• PayFast – payment processing for paid plans (manual EFT payments go directly to our bank).
• WhatsApp (Meta) – only when you or a visitor choose to open a WhatsApp chat from a button; the chat then runs on WhatsApp under its own terms.
• UptimeRobot – checks that the site is online; it does not receive personal information.

We may also disclose information where the law requires it, or to protect our rights and the safety of others. Because some providers are outside South Africa, your information may be processed in other countries. We choose providers that protect it to a standard comparable to POPIA.

5. Your card is public

A card is designed to be shared. Anything you put on it can be seen by anyone who has its link or QR code. Only add information you are happy to make public.

6. How long we keep it

We keep account information while your account is active and for a reasonable period afterwards where we must keep records. Leads, bookings and orders stay until the card owner deletes them or the account is closed. Deleted information may remain in our backups for up to 14 days before it is overwritten.

7. Security

We use encrypted connections (HTTPS), access controls so that account holders can only see their own data, restricted administrator access, regular software updates and backups. No online service is completely risk-free, but we work to protect your information and will notify you and the Information Regulator if a breach affects you, as the law requires.

8. Cookies

We use only the cookies needed to keep you signed in and the service working. We do not use advertising or cross-site tracking cookies.

9. Your rights

You may ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct or update it;
• delete it, or stop using it, where we no longer have a reason to keep it;
• stop using it for a purpose you object to, or withdraw consent you gave.

Email trevor@nexbridge.co.za. We may need to confirm who you are first. If your information was given to a card owner, we will pass your request on to them. If you are not satisfied with our response, you may complain to the Information Regulator (South Africa) at inforegulator.org.za.

10. Children

The service is meant for adults and businesses. We do not knowingly collect information from anyone under 18 without the consent of a parent or guardian.

11. Changes

We may update this policy. The date at the top shows the latest version, and we will tell account holders about significant changes.

12. Contact

Information Officer: Trevor Ndlovu, trevor@nexbridge.co.za.