How Arclyft collects, uses, and protects information for tradespeople and their clients.
01
Arclyft ("Arclyft", "we", "us") is a South African software service that helps tradespeople — electricians, plumbers, builders, HVAC and painting businesses — manage clients, jobs, quotes and invoices. This policy explains what personal information we collect through the Arclyft web app and mobile app, why we collect it, and the rights you have over it.
We process personal information as a "responsible party" under South Africa's Protection of Personal Information Act 4 of 2013 (POPIA).
02
We collect information in three layers: your own account details, information you enter about your business and clients, and technical data generated as you use the app.
Account
Name, email address, password (stored as a salted hash, never in plain text)
Business
Business name, CIPC registration number, VAT number, banking details used on your invoices
Your clients' details
Name, phone number, email, physical address — entered by you to run your own business
Job & document data
Job descriptions, schedules, statuses, quote and invoice line items and totals
Device & usage
Login timestamps, IP address, app version, crash and error logs
Where you add information about your own clients, you act as the responsible party for that data and Arclyft acts as your operator (processor) under POPIA — you remain responsible for having a lawful basis to hold your clients' details.
03
We do not sell personal information, and we do not use your clients' details for advertising.
04
When you send a quote or invoice via WhatsApp, it's shared as a PDF directly through your own WhatsApp app on your device — Arclyft does not route the message content through a third-party messaging provider. Transactional emails — invites, receipts, notices — are sent through Resend, which does not use your data for its own marketing purposes; it processes it solely to deliver the message.
06
Data is stored in a hosted Postgres database with access restricted to authenticated requests. Passwords are hashed, never stored in plain text. Accounts lock temporarily after repeated failed login attempts. No method of transmission or storage is perfectly secure, and we can't guarantee absolute security — but we apply industry-standard practices throughout.
07
We retain account and business data for as long as your account is active. If you close your account, we delete or anonymise personal information within a reasonable period, except where we're required to keep records for longer — for example South African tax and financial record-keeping requirements on invoices and quotes.
08
Under POPIA, you have the right to:
To exercise any of these rights, contact us using the details below.
09
Arclyft is a business tool intended for adults running or working at a trade business. It isn't directed at children, and we don't knowingly collect personal information from anyone under 18.
10
We'll update the date at the top of this page whenever this policy changes, and let account owners know of any material change by email.
11
Questions, requests, or complaints about how Arclyft handles personal information can be sent to support@arclyft.co.za.
Arclyft · Run your trade. Simply.