Privacy Policy

Effective 9 September 2026

SalesTracker Pro provides field-sales and field-operations tools to companies and their authorised users. This policy explains how we handle personal information under applicable privacy laws, including South Africa's Protection of Personal Information Act (POPIA).

Information we process

• Account and company details, including name, email address, phone number, username, role, and company membership.
• Work activity entered in the service, including customers, stops, assignments, call cycles, delivery routes, visits, notes, orders, reports, and optional photos.
• Precise location supplied while using location-based features such as starting a workday or checking in and out of a store. The app does not request background location access.
• Technical and security information needed to operate the service, such as session records, device or browser information, error logs, and audit events.
• Subscription status and product identifiers from our billing providers. We do not store full payment-card details.

Why we use it

We use information to provide and secure the service, enforce company access controls, create reports requested by users, support customers, manage subscriptions, prevent misuse, and comply with legal obligations. We do not sell personal information.

Public website analytics and cookies

Our public website, company signup page, and company login page use Google Analytics and linked Google Ads measurement to understand page activity, successful company signups, contact enquiries, and advertising performance. The authenticated field app and company workspace are not tagged with Google Analytics.

Analytics and advertising measurement storage is denied by default. If you select Allow measurement, Google may use first-party cookies and pseudonymous browser identifiers to measure advertising. Personalised ads require the separate optional choice in the banner. You can change or withdraw either choice through Cookie settings. If you decline, those cookies remain disabled, although Google may receive consent-state and limited cookieless measurement signals. We do not send names, raw email addresses, company names, message content, customer details or GPS locations to Google Analytics or Google Ads.

We record campaign labels supplied in website links alongside company registration, trial start, first field-team check-in and the first verified subscription payment for our internal acquisition report. These are operational records, not proof of Google attribution. With measurement consent, we retain first-visit campaign information and the Google click identifier in your browser for up to 30 days and associate them with your company registration. Without consent, no click identifier is saved; campaign labels on the current signup link may still appear in our internal report. Historical or unavailable attribution is reported as unknown rather than inferred.

When enhanced conversions are enabled and you allow measurement, your signup email is normalised and SHA-256 hashed before it is sent to Google Ads to match a conversion. A hash is still personal data, not anonymous data. Consent-eligible registration and later company milestones may also be sent from our server, using a stable event identifier to prevent double counting. Declining measurement suppresses this server-side advertising delivery. Company attribution is retained with the company account and removed when that account is deleted; contact support to request correction or erasure.

Your company and your data

To improve reliability and identify useful features, we keep internal daily counts of successful and failed feature requests by company and role for up to 90 days. These aggregates do not contain individual user identifiers, request content, customer names, GPS coordinates, passwords, or tokens, and are not sent to Google Analytics. Restricted operational records also track service failures and their resolution.

When your employer or another organisation creates your account, that organisation controls the work data in its workspace and can view or manage it through authorised administrators. SalesTracker Pro processes that information to provide the service. Questions about company records should first be directed to your company administrator.

Service providers and international processing

We use carefully selected providers for hosting, email delivery, maps, diagnostics, website analytics, advertising measurement, and subscription billing, including Google Analytics, Google Ads, and Paystack. These providers may process information in other countries and are permitted to use it only to supply their services to us. Store purchases are also subject to Apple or Google's privacy terms.

Retention and security

We retain account and business records while the relevant workspace is active and afterwards where reasonably needed for contractual, security, backup, dispute, or legal purposes. We use access controls, encryption in transit, password hashing, restricted tenant queries, and audit records. No online system can guarantee absolute security.

Your choices and rights

You may request access, correction, objection, restriction, export, or deletion where applicable. You can change the public website's analytics choice at any time through the Cookie settings control shown on tracked pages. Notification and location permissions can be changed in the app or device settings. An account deletion request can be started from the Profile screen or at our account deletion page.

Contact

For privacy questions or requests, email support@salestrackerpro.co.za. Business and service-address information is available on our contact page. You may also lodge a complaint with the Information Regulator of South Africa where POPIA applies.

Changes

We may update this policy as the service or legal requirements change. Material changes will be communicated in the service or by email where appropriate.