Privacy Policy

Squared provides retention-tracking software for South African subcontractors. This policy explains what personal information we process and your rights under the Protection of Personal Information Act, 2013 (POPIA).

Account details you provide: your name, email address, company name and CIPC/CIDB registration numbers.

Portfolio data you enter: projects, principal contractors, contract terms, payment certificates, retention balances and documents you upload.

Basic technical data needed to run the service securely (e.g. authentication session and access logs).

To provide the service: tracking your retention, generating flags, demand letters and reports.

To secure and maintain your account. We do not sell your personal information, and we do not use your portfolio data for advertising.

Your data is stored with our infrastructure providers acting as operators under POPIA: Supabase (database and authentication, hosted in the EU) and Vercel (application hosting). They process data on our instructions to run Squared and do not use it for their own purposes.

Your organisation’s data is isolated by row-level security and only accessible to your account. If you cancel, you can export your portfolio (PDF/CSV) beforehand, and we delete your account data on request within a reasonable period, save where the law requires us to retain it.

You may request access to, correction of, or deletion of your personal information, and you may object to processing. To exercise any of these rights, or to lodge a complaint, contact us at the address below. You may also complain to the Information Regulator (South Africa).