This draft privacy policy outlines the technical and organizational data processing principles of SnagSwift (a product of T.H.E Apps, South Africa) for early access evaluation under the Protection of Personal Information Act (POPIA, Act 4 of 2013) and the General Data Protection Regulation (GDPR). It does not constitute formal legal advice.
Effective Date: March 2026 | Jurisdiction: Republic of South Africa / Applicable Cross-Border Frameworks
1. Overview & Roles Under Data Protection Laws
SnagSwift provides a business-to-business (B2B) defect management software service for construction professionals. In delivering this service:
- Customer as Responsible Party / Data Controller: The subscribing organization (architectural practice, main contractor, project manager, or developer) controls and directs what project data, site photographs, and trade contractor details are entered into the service.
- SnagSwift as Operator / Data Processor: SnagSwift processes project data strictly on behalf of and under the instruction of the Customer to provide the defect management application.
2. Categories of Information Collected
We process the following categories of data in connection with the application:
- User & Account Information: Name, professional email address, organization name, role title, and authentication credentials.
- Project & Inspection Data: Building names, unit numbers, architectural drawings (PDFs/plans), defect coordinates/pins, defect categories, issue timestamps, and rectification notes.
- Site Photographs & Media: Photos captured by inspectors and contractors to document defect conditions and rectification evidence.
- Contractor & Trade Details: Trade company name, designated contact person, and email address for snag assignment notification.
- Technical & Telemetry Data: IP addresses, browser user agent, device operating system version, and error crash diagnostics necessary to maintain safe synchronization and service reliability.
3. AI Processing & Inference Privacy
SnagSwift provides optional AI assistive drafting features (Refine Description and Photo Vision Analysis). Regarding this processing:
AI Data Commitments
- Customer photographs and defect notes are processed ephemerally during inference to structure the defect record.
- Customer project data is never sold, rented, or used to train public or shared generative foundation models.
- Organizations retain the right to disable AI features across their tenant if their project procurement contracts mandate.
4. Local Device Storage & Offline Sync
To enable site inspections in concrete basements and signal-dead environments, the mobile application caches project drawings and active snags in sandboxed local device storage (SQLite/IndexedDB). This data is isolated to the application container and is cleared upon explicit account logout or device unregistration.
5. Subprocessors & Cloud Infrastructure
SnagSwift engages vetted third-party infrastructure providers to support hosting, database storage, email transmission, and AI inference:
- Cloud Hosting & Storage: [VERIFICATION REQUIRED: Primary cloud provider e.g., AWS / Google Cloud EU/South Africa datacenters].
- Transactional Email: Transactional dispatch providers for snag assignment notifications and password resets.
- AI Inference APIs: Enterprise AI model endpoints with zero-retention data privacy guarantees.
6. Data Subject Rights (POPIA & GDPR)
In accordance with the South African Protection of Personal Information Act (POPIA) and international standards such as GDPR, data subjects have rights regarding their personal data, including the right to request access, correction, or deletion of personal information held by SnagSwift.
Where SnagSwift processes information as an Operator on behalf of a Customer, data subject requests will be coordinated with the respective Customer organization.
7. Data Retention & Deletion
Project data is retained for the active duration of the Customer's subscription. Upon formal contract termination or project archive requests:
- Customers may export their complete defect history and photographic records in standard PDF and CSV formats.
- Tenant data is sanitized from active databases in accordance with our retention policy [VERIFICATION REQUIRED: Specific purge window e.g., 30–90 days following contract termination].
8. Information Officer & Contact
For inquiries regarding this privacy policy or data protection practices, please direct communications to:
A T.H.E Apps product
South Africa
Email: privacy@snagswift.app (or hello@snagswift.app)