Privacy Policy

• Identity Data: your full name and email address;
• Property Data: property names, addresses, and unit details you enter;
• Tenant Data: tenant names, SA identity numbers or passport numbers, email addresses, and telephone numbers;
• Lease Data: lease terms, dates, monthly rent amounts, rent due dates, and deposit amounts;
• Payment Records: amounts, dates, payment methods, reference numbers, and notes you log;
• Financial Data: rent roll totals and arrears amounts derived from your records;
• Technical Data: IP addresses, browser type and version, and device information; and
• Usage Data: information about how you use the Platform.

Tenant identity numbers: Where you enter SA identity numbers or passport numbers for tenants, RESI stores this information. Encryption at rest will be implemented prior to accepting paying subscribers beyond internal testing. You are responsible for ensuring you have a lawful basis for sharing this information with RESI.

We collect personal information through direct interactions (registration, data entry, support contact), automated technologies (cookies and server logs), and third-party providers (Paystack, Supabase, analytics providers).

• to provide the RESI platform and services, including rent tracking, payment logging, arrears management, and SARS ITR12 reporting;
• to process your subscription payment via Paystack;
• to respond to enquiries and provide customer support;
• to manage our relationship with you and notify you about changes to our Terms or Privacy Policy;
• to administer and protect the Platform; and
• to keep you informed about new features and services, subject to your marketing preferences.

We will not share your personal information with any entity outside of RESI for marketing purposes without your express opt-in consent.

We may share your personal information with our cloud infrastructure provider (Supabase, EU-hosted), our payment processor (Paystack), our email service provider (Resend), South African governmental authorities where required by law, and professional advisers where necessary. We require all third parties to treat your personal information in accordance with the law.

Your personal information is stored on Supabase infrastructure hosted in the European Union. We ensure appropriate safeguards are in place for any transfer of personal information outside of South Africa, including contractual and technical measures equivalent to those required under POPIA.

• encryption in transit (TLS) for all data between your browser and the Platform;
• access controls restricting your data to your workspace only;
• row-level security policies on the database;
• encryption at rest for tenant identity numbers (to be implemented prior to accepting paying subscribers); and
• procedures to deal with any suspected personal information breach.

We will notify you and the Information Regulator of a personal information breach where legally required to do so.

We will retain your personal information for as long as necessary to fulfil the purposes for which we collected it. If you cancel your account, we will delete your data within 30 days of a written request to support@re-si.co.za. You may export your data at any time from within the Platform.

You have the right to access, correct, delete, restrict, or transfer your personal information, and to object to its processing or withdraw consent. To exercise any of these rights, contact us at support@re-si.co.za. We will respond to all legitimate requests within one month at no charge.