Privacy Policy

1. Who is responsible

Industrial Hub is operated by Tunelo (Pty) Ltd (Reg. 2026/298503/07), a South African private company. We are the responsible party (operator/processor) under the Protection of Personal Information Act, 2013 (POPIA).

2. What we collect

• Account data — name, email and role of each staff user you authorise; the company name, address, registration number, VAT number and B-BBEE level you record on your tenant.
• Project data — projects, milestones, tenders, site activity, document attachments, invoices and line items you create.
• Contact data of your clients — names, email addresses and project references your team enters when issuing invoices or recording engagements.
• Authentication data — Google sign-in identifier (sub) and email, used to verify access. We never see your Google password.
• Operational logs — minimal request logs (IP address, route, status, timestamp) for security and performance, retained for 30 days.

3. Where your data lives

All Industrial Hub application data is stored in Google Cloud Platform's africa-south1 (Johannesburg) region — Cloud Run for compute, Cloud SQL (Postgres) for the database. Your data does not leave South Africa under normal operation.

Email (transactional) is sent via Resend. Authentication is handled via Google OAuth. These sub-processors may process minimal data outside South Africa during transmission, but your project records, invoices and tender data stay in africa-south1.

4. How we use your data

• To provide the Industrial Hub service to you (the lawful basis is performance of contract).
• To send transactional email (sign-in confirmations, invoice notifications, demo replies).
• To investigate operational incidents and prevent abuse (legitimate interest).

We do not sell your data, train AI models on your content, or use it for advertising.

5. Sharing

We share data only with the sub-processors strictly required to operate the service: Google Cloud (hosting, africa-south1), Resend (email delivery) and Google (Sign-In). We do not share your data with marketing networks, data brokers, or advertisers.

6. Retention

We keep your tenant data for as long as your account is active, plus 90 days after cancellation, to allow for restoration if you change your mind. You may request deletion at any time and we will remove your tenant data within 30 days.

7. Your POPIA rights

You have the right to access, correct, object to processing of, and request deletion of your personal data. To exercise any of these rights, email support@industrial-hub.co.za. We respond within 30 days.

If you are unhappy with how we handle your data, you can complain to the South African Information Regulator at inforegulator.org.za.

8. Security

We use TLS in transit, encryption at rest, role-based access control and audit logs. Access to production data is limited to named Tunelo staff under a documented access policy. We do not store passwords — Google handles authentication.

9. Changes

We may update this policy. Material changes will be notified by email to your tenant's billing contact at least 14 days before they take effect.

10. Contact

Information Officer: support@industrial-hub.co.za.