Legal
Privacy Policy / POPIA Privacy Notice
This Privacy Policy / POPIA Privacy Notice explains how Fabricata Track handles personal information and related workspace information.
Last updated 2026-09-27
Introduction
Fabricata Track aims to process personal information transparently, securely, and only for appropriate business and service purposes. Read this notice with the Terms of Use.
Responsible Party and Operator
For account and service information, the responsible party details are listed in the Legal Notice. For project information your organisation enters into its workspace, your organisation decides what is recorded and why, and Fabricata Track processes it on your organisation's behalf to provide the service.
Account Information
Names, email addresses, job designations, roles, passwords stored only as salted PBKDF2 hashes, sign-in times, failed sign-in counts, and the network address recorded with a password reset or email confirmation request.
Workspace Information
Company details, project details (customer, contractors, site, references and dates), assembly and part lists, workflow and progress records, schedules, delay records, uploaded documents, and the audit trail of who changed what and when. Project parties you record may include the names of people at other companies.
Technical Information
Request metadata, security logs and error details needed to operate and protect the service.
What Is Not Collected
Fabricata Track does not use advertising or analytics trackers, and loads no third-party scripts or fonts. It does not collect payment card details.
Why Information Is Processed
To provide the service, authenticate users, calculate progress and schedules, generate reports and exports, send service messages such as password resets, investigate errors, maintain security and comply with law.
Service Providers and Cross-Border Processing
The service is hosted on Vercel, with its database operated by Neon and files stored in Vercel Blob. The application and database are configured in the European Union (Frankfurt), so information is processed outside South Africa with providers that maintain contractual and security safeguards. Email, when enabled, is sent through a transactional email provider.
Who Can See Workspace Information
Workspace information is readable only by accounts in that workspace, according to their role. This is enforced on every database read. Fabricata support staff access customer data only where needed to troubleshoot a problem you have reported, investigate a security issue, or comply with law.
Security Safeguards
Measures include role-based access control, organisation scoping of every record, password hashing, encrypted transport, a strict content security policy, upload validation, and an append-only audit trail. No online service can guarantee absolute security.
Data Retention
Information is kept for as long as the workspace exists, because project and schedule history are business records. Archived projects are kept until an administrator deletes them. Retention after a workspace is closed will be confirmed on request.
Your Rights Under POPIA
You may ask for access to, correction of, or deletion of your personal information, and may object to processing, subject to applicable law and legitimate retention requirements. You can correct your own name and designation in Settings; an administrator can correct any account in their workspace.
Security Breach Communication
If personal information is accessed or acquired by an unauthorised person, appropriate steps will be taken under POPIA, which may include notifying affected parties and the Information Regulator.
Changes to This Policy
This policy may be updated as the service, providers or legal requirements change. The latest version will be posted with its last-updated date.
Contact Details
Privacy questions and POPIA requests can be sent to the privacy contact listed in the Legal Notice.
These policies are published for transparency and should be reviewed with the business owner and a qualified legal professional as Fabricata Track grows.