Privacy notice
1. Who we are
SightWalk ("we", "us") is provided by a South African joint venture of CompuTechnics and a South African fire-protection company. Our full company details are on the Company information page.
Information Officer: email [email protected], or use the contact form.
2. What this notice covers
This notice explains how we handle personal information as a responsible party when you:
- visit this website,
- contact us, book a demo or sign up for news,
- create or use an account in the SightWalk portal.
It also explains our role when we process site recordings on behalf of our customers (section 6). For those recordings, our customer is the responsible party, and their own privacy notice applies.
3. What we collect
| Category | Examples | Source |
|---|---|---|
| Enquiry and demo details | Name, work email, company, mobile number, industry, team size, message | You, via our forms, email or WhatsApp |
| Account details | Name, email, organisation, role, password (stored hashed), sign-in records | You, or your organisation's admin who invites you |
| Usage and security logs | Pages visited in the portal, IP address, browser type, timestamps, errors | Your device, automatically |
| Marketing preferences | Your opt-in, its date and wording version, and opt-outs | You |
| Billing contacts | Billing name, email, invoice details | Your organisation |
We do not knowingly collect special personal information or children's information through this website.
4. Why we use it, and on what basis
| Purpose | Lawful basis (POPIA s11) |
|---|---|
| Replying to enquiries and arranging demos | Your request; our legitimate interest in responding |
| Providing your account and the service | Performance of a contract with you or your organisation |
| Keeping the website and service secure | Legitimate interest; legal obligations (s19) |
| Sending product news by email | Your consent (s69); you can withdraw it at any time |
| Meeting legal, tax and accounting duties | Compliance with the law |
5. Do you have to give it to us?
Fields marked "required" on our forms are needed so that we can reply to you or provide an account. If you don't provide them, we can't do so. Everything else is voluntary. No law requires you to give us this information.
6. Site recordings we process for our customers
When a customer uses SightWalk, its staff may record video and audio on site. These recordings can include the voices and faces of people on site and details of the premises.
- Our customer is the responsible party. It decides why and how recordings are made, and it gives notice to people on site.
- We are the customer's operator (POPIA ss20–21). We process recordings only on the customer's instructions, under a written operator agreement.
- Audio and video are processed on our servers and are not sent to our AI provider. They are processed in South Africa.
- Transcript text (and, only if a customer switches it on, selected photo frames) is sent to our AI provider outside South Africa to structure it into draft lines (see section 8).
- Retention: raw recordings are deleted 30 days after the report is issued, by default. The customer can set another period, and can delete a recording at any time.
- Smart glasses: if a customer's staff record with smart glasses, the footage passes through the glasses' own app on their phone before it is uploaded to us. That step is between the customer and the glasses' maker, under the maker's terms.
- If you were recorded on a site and want to exercise your rights, please contact the company that did the work. We will help them respond. You may also contact our Information Officer.
7. Who we share it with
We share personal information only as needed, with:
- hosting providers for the website and the service, in South Africa,
- our AI provider, Anthropic, in the United States, for transcript text only,
- email and messaging providers, including WhatsApp (Meta) if you contact us that way,
- our payment gateway, if you pay online,
- professional advisers (lawyers, auditors), and
- authorities, where the law requires it.
We don't sell personal information.
8. Transfers outside South Africa (POPIA s72)
Some of our providers process information outside South Africa:
| Provider category | Information | Country/region | Safeguard |
|---|---|---|---|
| AI provider (Anthropic) | Transcript text from site recordings | United States | Binding agreement with data-protection terms |
| WhatsApp (Meta) | Messages you send us | Outside South Africa | Meta's terms |
9. How long we keep it
| Information | Retention |
|---|---|
| Enquiries and demo requests (no account) | Only as long as needed to respond and follow up |
| Account information | For the contract, and as long as the law requires afterwards |
| Raw site recordings (as operator) | 30 days after report issue, by default, as set by the customer |
| Reports, lines and chosen photos (as operator) | Per the customer's policy and the operator agreement |
| Security logs | As long as needed to protect the service |
| Marketing consent records | For as long as we market to you, and as long as needed to show consent |
| Accounting records | As tax law requires |
10. How we protect it (POPIA s19)
Measures we use include:
- speech recognition on our own servers, with audio and video kept away from the AI provider,
- separation of each customer organisation's data, and role-based access,
- encryption in transit (HTTPS) and at rest, with separate keys for each organisation,
- secrets kept out of our code, and
- logging of every outbound data flow.
No system is perfectly secure. If we believe your personal information has been accessed without authorisation, we will notify you and the Information Regulator as POPIA s22 requires. For customer recordings, we tell the customer immediately so that it can do so.
11. Direct marketing (POPIA s69)
We send product news by email only if you've opted in. The tick-box is never ticked for you. Every message names us and includes a free way to unsubscribe. You can also withdraw consent by emailing [email protected].
12. Cookies
This website uses only strictly necessary cookies. We don't use analytics or tracking cookies. See our cookie notice.
13. Your rights
Under POPIA you may:
- ask whether we hold your personal information and request a copy (s23),
- ask us to correct or delete it (s24),
- object to processing based on legitimate interest (s11(3)), and to direct marketing at any time,
- withdraw consent where we rely on it, and
- complain to the Information Regulator.
To make a request, email our Information Officer at [email protected]. We may need to confirm your identity. Access requests are handled under our PAIA manual.
14. The Information Regulator
The Information Regulator (South Africa) Website: inforegulator.org.za Complaints can be lodged through the Regulator's website.
15. Changes to this notice
We'll post any changes here with a new version date and, where they materially affect you, tell account holders by email.
Version 1 · Effective 13 October 2026