Memberssistant ("we", "our", or "the Platform") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, protect, and share information when you use our residence management platform.
This policy is designed to comply strictly with applicable data protection laws, specifically including the Protection of Personal Information Act (POPIA) of South Africa.
1. Information We Collect
Depending on your interaction with Memberssistant, we may collect the following categories of information:
- Identity Information: Name, surname, student number, government identification, profile details, and direct contact information.
- Biometric Information: Facial recognition data, biometric templates, verification records, and related authentication logs utilized exclusively for secure identity verification.
- Medical Information: Optional health-related data such as severe allergies, chronic medical conditions, emergency contacts, or blood type, provided strictly on a voluntary basis.
- Location Information: GPS location data, accessed only when explicitly required for emergency assistance, panic features, or authorized geographic platform functions.
- Residence Information: Room allocations, lease details, visitor logs, maintenance requests, and physical access history.
- Technical Information: Device identifiers, application usage telemetry, authentication logs, and broader system activity records.
2. How We Use Your Information
Memberssistant processes personal information strictly for legitimate business and operational purposes, which include:
- Executing secure identity verification through advanced biometric matching.
- Managing day-to-day residence operations and accommodation services.
- Providing immediate emergency response routing and functionality.
- Facilitating official communication between residents, landlords, residence staff, and authorized security personnel.
- Maintaining comprehensive security records and immutable access history.
- Analyzing telemetry to improve platform performance and overall user experience.
3. Biometric Data Processing
Memberssistant leverages advanced biometric technology to provide definitive, secure identity verification and prevent unauthorized property access.
Biometric information is legally classified as sensitive personal information. We process this data exclusively for the purposes of security, authentication, fraud prevention, and access management.
We absolutely do not sell, rent, broker, or utilize biometric information for advertising, marketing, or any unrelated commercial purposes.
Users acknowledge that while biometric verification drastically improves physical security, no digital security system can guarantee absolute, infallible protection against every possible highly-sophisticated threat.
4. Medical Information & Emergency Access
Memberssistant allows users to voluntarily input medical information that may critically assist verified first responders during emergency situations.
This medical information is heavily protected. Access is strictly restricted to authorized medical or security personnel, and only when there is a legitimate, triggered emergency event.
Access to this sensitive emergency data is explicitly logged and recorded for security auditing, compliance, and accountability purposes.
5. Security & Encryption Measures
Memberssistant implements robust technical and organizational security measures engineered to protect personal information against unauthorized access or data breaches.
- Sensitive personal and biometric information is encrypted at rest and in transit.
- Strict Role-Based Access Controls (RBAC) limit information visibility exclusively to authorized user roles.
- Multi-layered authentication systems are deployed to prevent unauthorized account access.
- Comprehensive security logs are actively maintained to monitor and audit critical actions performed within the platform ecosystem.
6. Third-Party Service Providers
Memberssistant engages vetted, enterprise-grade third-party providers to operate specific technical infrastructure.
- Cloud Infrastructure: Utilized for secure hosting, authentication scaling, database management, and push notifications.
- Payment Gateways: Engaged to securely process financial transactions. Memberssistant does not store complete payment card numbers or CVV codes on our servers.
- Communication Providers: Engaged for the delivery of mission-critical SMS notifications, emails, and platform communications.
These enterprise providers process information strictly according to their own rigorous security practices and legally binding Data Processing Agreements (DPAs).
7. Sharing of Information
Memberssistant unequivocally does not sell your personal information.
Information may only be shared with the following entities:
- Your specific accommodation provider or explicitly authorized residence management personnel.
- Verified emergency responders or private security firms during an active crisis.
- Technical service providers strictly necessary to operate the Platform infrastructure.
- Law enforcement or regulatory authorities, but only where legally mandated by a valid subpoena or court order.
8. Data Retention
We retain personal information only for the duration necessary to fulfill operational, security, legal, and contractual obligations.
When personal information is no longer legally or operationally required, we take immediate, mathematically secure steps to permanently delete or fully anonymize it.
9. Your Privacy Rights
Under the Protection of Personal Information Act (POPIA) and applicable laws, you hold the following rights:
- Requesting a transparent record of the specific personal information we hold about you.
- Requesting the immediate correction of inaccurate, outdated, or incomplete information.
- Requesting the deletion or destruction of your data where legally permissible and not in conflict with lease retention laws.
- Requesting detailed documentation regarding how your data is processed and routed.
10. Account Security Responsibilities
Users bear the final responsibility for protecting their account credentials, PINs, and devices. You must immediately report any suspected unauthorized access or hardware loss to platform administration.
11. Children's Privacy
Memberssistant is strictly intended for adult users, university students, and individuals who are legally permitted to enter into binding accommodation agreements and utilize unmonitored residence services.
12. Changes To This Privacy Policy
Memberssistant reserves the right to update this Privacy Policy to reflect evolving legal or technical requirements. Users will be formally notified of significant, material changes via the Platform prior to their implementation.
13. Contact Information
For privacy-related questions, data access requests, POPIA compliance inquiries, or security concerns, please contact Memberssistant directly through the official support channels available within the Platform dashboard.