Privacy Policy

7Maintain™ · SEVEN TWENTY DEGREES (Pty) Ltd · Version 1.0 · Last updated 30 June 2026

1. Who we are

This Privacy Policy explains how SEVEN TWENTY DEGREES (Pty) Ltd, Registration Number 2023/212025/07 ("we", "us"), collects, uses, shares and protects Personal Information when you visit our websites (7maintain.com and 720degree.co.za) and use the 7Maintain maintenance-management platform (the "Platform"). It is issued under the Protection of Personal Information Act, 4 of 2013 ("POPIA"). We are registered in the Republic of South Africa; our full registered office address is available on request. Contact: admin@720degree.co.za.

Note on roles: where a business customer uses the Platform to manage information about its own employees, contractors and suppliers, that customer is the responsible party and we act as its operator; our handling of that data is governed by the Data Processing Agreement with the customer. This Policy describes the Personal Information for which we are the responsible party (for example, website visitors and our direct account contacts).

2. Information we collect

Account & contact: name, email, telephone, organisation, role, billing contact.
Authentication: login credentials stored as hashes, session and device identifiers.
Usage & device: IP address, browser/device type, pages visited, actions taken (logs and cookies).
Content you submit: enquiries, support requests, form data.
Platform data: where you are an authorised user of a customer's instance — work-order data, comments, photographs, sign-offs and related operational data, processed on behalf of that customer.

We do not deliberately collect Special Personal Information, except the optional, consent-based facial-recognition clock-in (biometric templates stored encrypted, never raw images) which a customer may enable for its own staff. We do not store payment-card numbers; card payments are handled by our payment processor.

3. How and why we use it

To create and manage accounts; provide, secure and support the Platform; process payments; respond to enquiries; send service and (where permitted) marketing communications; comply with legal obligations; and improve our services using aggregated, de-identified data.

4. Lawful basis

We process Personal Information where necessary to perform a contract, to comply with the law, for our legitimate interests (such as securing and improving the Platform) balanced against your rights, or with your consent (for example, optional marketing, or biometric clock-in). You may withdraw consent at any time.

5. Local AI and data location (our sovereignty commitment)

All client-facing artificial-intelligence features run on locally-hosted models on our own infrastructure within the Republic of South Africa. We do not send your Personal Information to any third-party or offshore cloud-AI provider. Customer Data is hosted in-country at the Teraco Durban data centre through our hosting provider, on encrypted storage.

6. Sharing and sub-processors

We share Personal Information only as needed and under appropriate safeguards, with:

Linux Tech (Pty) Ltd — hosting at Teraco Durban (South Africa);
Paystack (Paystack Payments) — payment processing;
our own self-hosted email server (mail.720degree.co.za) — delivery of transactional and notification emails (we do not currently outsource email to a third-party provider);
professional advisers or authorities where required by law.

We require each sub-processor to protect Personal Information consistent with this Policy and POPIA. We do not sell Personal Information.

7. Cross-border transfers

We host and process Personal Information within South Africa. We will not transfer Personal Information outside South Africa unless permitted under section 72 of POPIA and with appropriate safeguards in place.

8. Retention

We keep Personal Information only for as long as necessary for the purposes described, for the duration of your account, and for a reasonable period afterwards to comply with legal, accounting and reporting obligations and to resolve disputes. When no longer required, it is securely deleted or de-identified.

9. Your rights (POPIA sections 23–25)

You have the right to be notified that we hold your Personal Information; to request access to it; to request correction or deletion of inaccurate, irrelevant, excessive or unlawfully obtained information; to object to processing; and to complain to the Information Regulator. To exercise these rights, contact our Information Officer (clause 11). We may need to verify your identity first.

Information Regulator (South Africa): www.inforegulator.org.za.

10. Cookies & Analytics

We collect anonymous, aggregated usage statistics on our own South African servers to improve the site. We do not use third-party analytics (e.g. Google Analytics) and set no tracking cookies. Strictly-necessary session cookies are used by the app only.

11. Information Officer and contact

Information Officer: Terence J Grenfell. Email: admin@720degree.co.za. The Information Officer is registered (or in the course of registration) with the Information Regulator.

12. Changes to this Policy

We may update this Policy from time to time. The current version is published at 7maintain.com with its effective date; material changes will be notified by reasonable means.