Privacy Policy
Effective date: 8 April 2026 · StreetSmarts
1. Introduction
StreetSmarts ("StreetSmarts", "we", "us", or "our") is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
Please read this policy carefully. If you disagree with its terms, please discontinue use of our services.
2. Responsible Party
The responsible party (as defined under POPIA) for your personal information is:
3. Information We Collect
We collect information in the following ways:
Information you provide directly
- Account registration: name and email address
- Report requests: property address or suburb you search for
- Comparison requests: multiple addresses submitted for side-by-side comparison
- Payment: billing details processed by Paystack (we do not store full card details)
- Agency registration: company name, contact details, agency registration information
- Communications: messages or enquiries you send to us
Information collected automatically
- IP address and browser/device information
- Pages visited and actions taken on the platform
- Report generation history and access logs
- Authentication tokens stored in secure HTTP-only cookies
- Referral attribution data (if you arrive via a referral link)
4. How We Use Your Information
We use your personal information for the following lawful purposes:
- To create and manage your account
- To generate neighbourhood and property reports you request
- To generate comparison reports across multiple areas
- To process payments and issue receipts or invoices
- To attribute referrals and track how you discovered StreetSmarts
- To send transactional emails (account verification, report ready, payment confirmation)
- To respond to your support queries
- To improve our platform, services, and data quality
- To detect and prevent fraud or abuse
- To comply with legal obligations
We will not use your personal information for unsolicited direct marketing without your explicit consent, and we will always provide an opt-out mechanism in any marketing communications.
5. Third-Party Services
To provide our Reports, we integrate with licensed third-party service providers. By using StreetSmarts you acknowledge that address and location data you input may be sent to these services to generate your Report. The categories of third-party services we use include:
Each third-party provider operates under its own privacy policy and data processing terms. We only share the minimum data necessary to deliver your requested Report.
6. Data Sharing
We do not sell your personal information. We will not share your personal information with third parties except in the following circumstances:
- With third-party service providers as described in Section 5, solely to provide the services you requested
- With an agency account holder who invited you to their team (your name and email)
- When required by law, court order, or lawful request from a government authority
- To protect the rights, property, or safety of StreetSmarts, our users, or the public
- In connection with a merger, acquisition, or sale of assets — in which case you will be notified
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services to you. We may retain certain data for longer where required by law or for legitimate business purposes such as:
- Financial records: 5 years from date of transaction (SARS requirements)
- Account records: retained until account deletion plus 12 months
- Report request logs: up to 3 years for audit and data quality purposes
When personal information is no longer required, we will securely delete or anonymise it.
8. Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These include:
- HTTPS encryption for all data in transit
- Passwordless authentication via time-limited magic links
- HTTP-only, secure authentication cookies
- CSRF protection on all form submissions
- Access controls limiting data access to authorised personnel
- Regular review of security practices
No method of internet transmission is completely secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that may affect you, we will notify you as required by POPIA.
10. Your Rights Under POPIA
Under the Protection of Personal Information Act (POPIA), you have the following rights regarding your personal information:
- Right of access: Request a copy of the personal information we hold about you
- Right to correction: Request correction of inaccurate or incomplete information
- Right to deletion: Request deletion of your personal information (subject to legal retention requirements)
- Right to object: Object to processing of your personal information in certain circumstances
- Right to restrict processing: Request that we restrict how we process your information
- Right to lodge a complaint: Lodge a complaint with the Information Regulator of South Africa
To exercise any of these rights, contact us at platform@streetsmarts.co.za. We will respond within 30 days.
11. Children
Our services are not directed to children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes by email or by posting a notice on our platform. Continued use of our services after changes take effect constitutes acceptance of the revised policy.
13. Contact
For any privacy-related queries, requests, or complaints: