Privacy Policy

This policy explains what personal information DeskView collects, why, how it is protected, and the rights you have over it under POPIA. By creating a DeskView account you agree to this policy.

1. Who is responsible for your information

DeskView is operated by Liko Mpambani, an individual based in South Africa ("DeskView", "we", "us"). We are the "responsible party" for your personal information under POPIA.

For any privacy question, data request, or complaint, contact us at support@deskview.co.za.

2. The information we collect

• Account details: your email address, and a password. Your password is stored in hashed form by our authentication provider; we never see or store it in plain text.
• Subscription and payment information: handled by our payment processor, Paystack. We do not receive or store your card number, CVV, or full banking details. We store only a payment reference and your subscription status.
• Connection information: to link your phone to your laptop, we generate a private address for your device and record your laptop's local network (LAN) IP address and a device identifier. This lets the phone reach the laptop on your own Wi-Fi.
• Technical information: basic, standard server logs (such as request times and error information) used to keep the service running and secure.
• Usage analytics: anonymous product-usage events (pages and screens viewed, clicks, and which setup steps were reached), collected through our analytics provider PostHog so we can see where to improve DeskView. This never includes your handwriting, your desk video, or the content of anything on your screen, and it is not linked to your identity. Our website honours the browser "Do Not Track" setting; to opt out of analytics entirely, email us at support@deskview.co.za.

3. Why we collect it (purpose)

• To create and manage your account.
• To provide the DeskView service and set up your secure phone-to-laptop connection.
• To process your free trial and subscription payments.
• To send you essential service emails (for example password resets and account notices).
• To keep the service secure and to provide support.

We process your information because it is necessary to provide the service you asked for (to perform our contract with you), because you have consented, or because we have a legitimate interest in running and securing DeskView, as permitted by POPIA.

4. Who we share it with

We use a small number of trusted service providers ("operators") who process information only on our instructions to run DeskView:

• Supabase: account authentication and database.
• Paystack: subscription payments.
• Cloudflare: the DNS address that routes your phone to your laptop.
• Render: hosting for our backend service.
• Resend: sending essential service emails.
• PostHog (EU region): anonymous product analytics to understand how DeskView is used and where to improve it.

We do not sell your personal information, and we do not share it for advertising.

5. Cross-border transfer

Some of the providers above process and store data on servers outside South Africa. Where this happens, we take reasonable steps to ensure your information is protected by a comparable level of security and by the providers' own data-protection commitments, as required by POPIA.

6. How long we keep it

We keep your personal information for as long as your account is active. When you delete your account, your profile, subscription record, and device information are permanently removed. We may retain limited records where the law requires (for example basic payment records for tax purposes).

7. How we protect it

We use encryption in transit (HTTPS), hashed passwords, database access controls (row-level security), and restrict access to the keys that can read your data. No system is perfectly secure, but we take reasonable and appropriate measures to protect your information as required by POPIA.

8. Your rights under POPIA

You have the right to:

• Ask what personal information we hold about you and request a copy.
• Correct information that is inaccurate.
• Request deletion of your account and personal information by emailing us. We handle deletions manually so we can honour your request while keeping a minimal record needed to prevent repeated free-trial abuse.
• Object to, or withdraw your consent for, certain processing.
• Lodge a complaint with the Information Regulator.

To exercise any of these rights, email support@deskview.co.za.

9. Children

DeskView accounts must be held by a person aged 18 or older. If a person under 18 (for example a tutoring student) uses DeskView, they must do so under the account and supervision of a parent, guardian, or responsible adult who has agreed to this policy on their behalf. We do not knowingly collect personal information from children without such consent.

10. Cookies and local storage

DeskView uses your browser's local storage to keep you signed in and to remember your setup progress. We do not use third-party advertising or tracking cookies.

11. Changes to this policy

We may update this policy from time to time. Material changes will be posted here with a new effective date.

12. Complaints to the Information Regulator

If you believe we have handled your personal information unlawfully, you may lodge a complaint with the Information Regulator (South Africa):

• Email (complaints): POPIAComplaints@inforegulator.org.za
• Website: inforegulator.org.za
• Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg

13. Contact us

Questions about this policy or your information: support@deskview.co.za.