/Legal/Privacy Policy

Privacy Policy

Last updated: 30 July 2026

This Privacy Policy explains how MaidServSA collects, uses, shares, stores, and protects personal information when you use the platform.

This policy is intended to align with the Protection of Personal Information Act, 2013 (POPIA), including sections 11, 13, 14, 23, 24, 25, and 72.

Table of Contents

1. POPIA Compliance Statement

MaidServSA processes personal information in a lawful and reasonable manner and takes steps to protect confidentiality, integrity, and availability of data under its control.

2. Responsible Party

For POPIA purposes, MaidServSA acts as the Responsible Party for personal information processed through the platform.

3. Information We Collect

3.1 Account and profile information

  • Identity and profile details such as your name and date of birth, plus the background information you choose to add (for example address, place of birth, nationality, residency status, languages, education, marital status, and school).
  • Contact and account details such as your email address and phone number. Passwords are never stored in readable form.
  • Platform details such as your role, profile photo, bio, location, rating, and account status (including whether an account is suspended).
  • References to files you upload, such as your CV and profile photo.
  • Account-security and timing information, such as when your password was last changed and when your account was created or updated.

3.2 Job and application data

  • Job details: title, description, date and time, payment type, pricing, location (the general area and, where you provide it, the full address and map location), images, and assignment status.
  • A history of status changes and notes for each job.
  • Applications: the applicant's identity, message, and decision status.

3.3 Messaging and moderation data

  • Messages: content, attachment details, timestamps, and edit/delete information.
  • Message read receipts.
  • Message reports: the reason, status, and review outcome.

3.4 Ratings and trust data

  • Ratings: the score, review text, and moderation status.
  • Rating reports: the reasons raised and the review outcome.
  • Earlier review records where present.

3.5 Files and technical information

  • File details: owner, original filename, file type and size, where it is stored, status, and related metadata.
  • Notification records and experience answers.

4. Purpose of Processing

We process information to:

  1. Create and manage user accounts.
  2. Match clients and domestic workers through job postings and applications.
  3. Enable messaging and collaboration during active jobs.
  4. Provide trust and safety features (ratings, reports, moderation).
  5. Operate AI-assisted drafting tools requested by users.
  6. Maintain platform security, detect abuse, and comply with legal obligations.

These purposes align with POPIA section 13 (purpose specification).

5. Legal Basis for Processing

Processing may rely on one or more POPIA section 11 grounds, including:

  • User consent (for account creation and optional profile content)
  • Contract performance (providing marketplace functions)
  • Legal obligations (regulatory compliance, lawful disclosure)
  • Legitimate interests (fraud prevention, platform security, dispute handling)

6. Data Sharing and Disclosure

6.1 Platform visibility rules

Location and profile visibility follow role-based rules documented in PERMISSION_POLICY.md. In summary:

  • publicArea is broadly visible.
  • Exact address/coordinates are restricted to authorized participants and admins.

6.2 Service providers and integrations

MaidServSA may use third-party processors to operate services:

  • Google Cloud Storage — file storage (avatars, CVs, ID documents).
  • Google Maps services — location autocomplete and place lookup.
  • Google Analytics — visit statistics for public pages only. It does not run on sign-in, password reset, account recovery, or any signed-in page, and receives only the page address — never your name, email, account ID, or any job, application, or message identifier. Cross-border processing may apply (see § 11). Details and opt-out are in the Cookie Policy.
  • Google's Gemini AI service — generative AI for optional features (job description, application message, candidate match, best-candidate picker). Triggered only when you click an AI button. Prompts contain the minimum data required for the feature and never include email, phone, exact address/coordinates, date of birth, ID documents, passwords, payment data, direct messages, or file contents. Cross-border processing may apply (see § 11). Full data flow, retention, and opt-out are documented in the AI Use Policy.

6.3 No data sale

MaidServSA does not sell personal information to third-party data brokers.

6.4 Legal disclosures

We may disclose data when required by law, court order, or lawful governmental request.

7. Data Subject Rights

Subject to POPIA and identity verification, you may request to:

  • Access your personal information (section 23)
  • Correct or update inaccurate information
  • Object to certain processing where applicable
  • Request deletion/destruction where legally permissible (section 24)
  • Submit complaints to the Information Regulator (section 25 process context)

8. Security Measures

We implement technical and organizational safeguards including:

  • Industry-standard password hashing (passwords are never stored in readable form)
  • Encrypted (HTTPS) connections in production
  • Access checks so only the right people can see or change sensitive information
  • Moderation and abuse-reporting workflows

No internet-based system is completely secure; users should also protect account credentials.

9. Cookies and Browser Storage

MaidServSA stores a small amount of sign-in data in your browser so you stay logged in between page reloads. Public pages also use Google Analytics cookies to count visits; these are not set on sign-in, password reset, account recovery, or any signed-in page.

See the Cookie Policy for details, including how to opt out of analytics.

10. Children's Privacy

MaidServSA is intended for users 18 years and older. We do not knowingly provide services to children.

11. Cross-Border Transfers

Certain processing may involve infrastructure outside South Africa (for example Google-hosted services). Where cross-border transfers occur, MaidServSA applies safeguards consistent with POPIA section 72.

12. Retention and Deletion

Retention periods vary by data category and legal requirement.

See the Data Retention Policy for full schedules and deletion workflow.

13. Information Regulator Contact

South African Information Regulator (for POPIA complaints and guidance):

  • Website: https://www.justice.gov.za/inforeg/
  • General email channels and contact details are published on the regulator website.

14. Contact Us

For privacy requests or concerns:

  • Email: support@maidservsa.co.za
  • Subject line suggestion: Privacy Request - MaidServSA