Privacy & Security

What we collect and why

• Account details (name, email, phone) — for authentication and booking notifications.
• ID and banking documents for providers — for verification and payout routing under South African KYC rules.
• Job data (descriptions, photos, chat, bids) — for matching and dispute resolution.
• Device / IP data — for security (rate-limiting, fraud detection, login audit).

How we store and protect it

• All data at rest is stored in AWS DynamoDB with server-side encryption enabled by default.
• Point-in-time recovery is enabled on every production table, providing 35-day rollback protection.
• Authentication is handled by AWS Cognito with JWT verification on every state-changing endpoint.
• Rate limiting, CSRF protection and security headers (HSTS, CSP, X-Content-Type-Options) are applied at the edge.
• Access to raw personal data inside HomeSorted is restricted to the platform integrity team and logged in an immutable audit trail.

Your POPIA rights

• Right to access — request a copy of the personal information we hold on you.
• Right to correction — ask us to fix inaccurate data.
• Right to erasure — request deletion of your account and associated data (subject to legal retention obligations).
• Right to object — object to specific processing activities.
• Right to lodge a complaint — with the Information Regulator of South Africa.

How to exercise your rights

Email privacy@homesorted.co.za with your request and a copy of your ID for identity verification. We respond within 21 calendar days as required by POPIA. If you disagree with our response, you may lodge a complaint directly with the Information Regulator at inforeg@justice.gov.za.

Information Officer

The Information Officer for HomeSorted (Pty) Ltd, registration 2026/189269/07, is the current CEO. Contact privacy@homesorted.co.za for POPIA matters. See our full Privacy Policy at /privacy for the complete legal text.