Privacy Policy & POPIA Notice

This Privacy Policy is issued by PMO Edge Technology ("PMO Edge", "we", "us", "our"), the provider of the PMO Edge project management office platform (the "Platform") available at pmoedge.tech. It explains how we collect, use, store and protect personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA").

For any privacy-related query, complaint, or request, contact our Information Officer at support@pmoedge.tech.

We collect the following categories of personal information:

• Account information — name, email address and password (stored securely hashed, never in plain text) when you or your organisation creates a Platform account.
• Platform content — project, programme, RAID, financial, and reporting information that you or your organisation enters into the Platform in the course of using it. Where this includes personal information about your colleagues or third parties (e.g. a project manager or sponsor's name), your organisation remains responsible for having a lawful basis to enter that information, and we process it on your organisation's behalf.
• Contact and demo requests — the name, email address, organisation, role and message you submit on our Contact us page. These are sent to us by email so we can respond.
• Preview requests — if you request a preview of one of our products, your name, email address and (optionally) organisation, together with a record of the consents you gave and when you gave them. We use your email address to send you a one-time access link and to make sure each preview is viewed once, and we record when it was opened.
• Direct communications — information you send us directly by email or WhatsApp.
• Technical information — standard web server logs (IP address, browser type, pages visited) and essential authentication session cookies required to keep you signed in. We do not use advertising, tracking, or analytics cookies.

We process personal information to:

• Create and administer your Platform account and authenticate sign-in;
• Provide, operate and support the Platform's features for your organisation;
• Respond to enquiries submitted through our contact channels;
• Send you a preview you have requested;
• Contact you about our products and services (direct marketing), only where you have given us your consent to do so;
• Maintain the security, integrity and proper functioning of the Platform;
• Comply with legal, regulatory and contractual obligations.

Our lawful basis for this processing is that it is necessary to perform our contract with your organisation, to pursue our legitimate business interests in operating the Platform, or because you have given consent (e.g. by voluntarily submitting an enquiry).

The Platform is hosted using Vercel and Supabase, both of which may process and store data on infrastructure located outside South Africa. Where personal information is transferred across borders in this way, we take reasonable steps to ensure it remains subject to a level of protection that is at least equivalent to POPIA, including relying on our providers' contractual data protection commitments.

Data in transit is encrypted (HTTPS/TLS). Passwords are stored using industry-standard hashing and are never visible to PMO Edge staff. Access to Platform data is restricted through account-based access controls.

We do not sell personal information. We share it only with:

• Our infrastructure providers (Supabase, Vercel) who process data on our behalf strictly to operate the Platform, acting as operators under POPIA;
• Other users within your own organisation's Platform workspace, as configured by your organisation;
• Law enforcement or regulators, where required by law.

We retain account and Platform data for as long as your organisation's account remains active, and for a reasonable period afterward to meet legal, accounting or dispute-resolution requirements, after which it is deleted or anonymised.

We keep preview request and enquiry records for as long as we need them to follow up with you, and for no longer than 24 months unless you become a client.

Under POPIA, you have the right to:

• Request access to the personal information we hold about you;
• Request correction or deletion of inaccurate or outdated information;
• Object to processing of your information on reasonable grounds;
• Withdraw consent, where processing is based on consent, at any time;
• Opt out of direct marketing at any time, by replying to any of our emails or contacting us at support@pmoedge.tech;
• Lodge a complaint with the Information Regulator of South Africa if you believe your information has been mishandled.

To exercise any of these rights, contact us at support@pmoedge.tech.

We implement reasonable technical and organisational measures to protect personal information against loss, unauthorised access, alteration or disclosure, including encrypted connections, access controls and secure password storage. No system is completely secure, and we will notify affected users and the Information Regulator in the event of a security compromise as required by POPIA.

The Platform is intended for business use by adults acting on behalf of their organisation. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

Questions, requests or complaints about this Privacy Policy or our handling of your personal information can be directed to our Information Officer:

Email: support@pmoedge.tech
WhatsApp: +27 82 526 9226