Privacy Policy

Last updated: 7 October 2026

1. Who we are

JobRunner is operated by Fortem Equity Holdings (Pty) Ltd, a private company incorporated in South Africa ("JobRunner", "we", "us"). This policy explains how we handle personal information in connection with the JobRunner platform at jobrunner.co.za and app.jobrunner.co.za. Privacy questions and requests: privacy@jobrunner.co.za.

2. Two kinds of personal information

JobRunner is business software, so we handle personal information in two distinct roles. First, information about you and your team (account holders and users): for this, we are the responsible party under the Protection of Personal Information Act, 2013 (POPIA). Second, information your business enters about its own clients, staff, and contacts (for example a client's name, phone number, address, or signature on a job): for this, your business is the responsible party and JobRunner acts as an operator, processing it only to provide the service and on your business's instructions.

3. What we collect

Account information: name, email address, phone number, business name, role, and login credentials. Business content: the records your team creates in JobRunner — clients, jobs, quotes and invoices, expenses and receipts, vehicle log entries, forms, photos, and signatures. Technical and usage information: device and browser type, IP address, log data, and product usage events, used to keep the service secure and improve it. Support communications: messages you send to our support and feedback channels. Where a client interacts with a document link your business sends them, we record technical details of that interaction (such as IP address and browser type) as part of the document's activity record.

We also hold work notes, form answers and time cards, and your business's banking details as shown on your invoices.

Billing information: your JobRunner subscription charges and receipts, and the card's brand, last four digits and expiry date. The card itself is held by our payment provider, Paystack; we never see or store the full card number.

Location: your approximate location, worked out from your IP address by our analytics provider and by Google.

JobRunner does not collect your device's GPS location.

4. How we use information

We use personal information to provide and operate the service; to authenticate users and secure accounts; to process billing; to send service communications such as document delivery, job notifications, and account emails; to provide support; to monitor for errors and abuse; and to understand product usage so we can improve JobRunner. We do not sell personal information, and we do not use your business content for advertising.

5. Hosting and security

JobRunner data is hosted on Amazon Web Services (AWS) infrastructure in the UK/EU. Data is encrypted in transit and at rest, and each business's data is logically isolated from other businesses on the platform, with access enforced at the database level. Access to production systems is restricted and monitored.

6. Sharing and service providers

We share personal information with the providers that run JobRunner for us, under agreements that limit their use of it to that service:

• Supabase: hosting, database and file storage (on the infrastructure section 5 describes).
• Netlify: serving the JobRunner website and web app.
• Resend: sending the app's emails.
• Paystack: card payments for subscriptions, on the web only. The JobRunner app on Google Play sells nothing.
• Sentry: error reports, hosted in the EU.
• PostHog: product analytics, hosted in the EU.

Google acts under its own terms rather than only for us. When you type an address, what you type is sent to Google Maps Platform to suggest matching addresses; the app loads Google's map service; and the website and the app load fonts, and the app some of its code, from Google's servers. So Google receives your device's IP address. Google's use of this data is covered by Google's privacy policy (policies.google.com/privacy).

When you send a quote, an invoice or a job card to your customer, you choose to share it with them.

We do not sell personal information, and we do not use it for advertising.

We may also disclose information where required by law or to protect our rights, our users, or the public.

7. Cross-border processing

Because our infrastructure is located in the UK/EU, personal information is transferred outside South Africa. These jurisdictions maintain data-protection laws that provide a substantially similar level of protection to POPIA, and our providers are bound by contractual safeguards, consistent with section 72 of POPIA.

8. Retention

We keep personal information for as long as your account is active. When an account is closed — by you, including when you cancel your subscription, or by us under our Terms — it is kept read-only for 90 days so you can export your data or reactivate, and we then delete it from our active systems within a further 30 days. When you ask us to delete your account, we instead complete the deletion within 30 days of confirming your request; if you ask for time to download your records first, we keep the account read-only for up to 90 days and then delete it within 30 days.

Records the law requires us to keep — the invoices and receipts for a JobRunner subscription and the payment records behind them — are kept for 5 years (Tax Administration Act) or 7 years (Companies Act), with names, email addresses and phone numbers removed, and are then deleted. While a dispute about an account is still open, we may keep the limited information it needs until it is resolved. Documents a business has already issued to its customers, such as job cards and completed forms, keep the names they were issued with.

Copies in our encrypted backups are overwritten within 7 days of a deletion.

9. Your rights

Under POPIA you may request access to the personal information we hold about you, ask us to correct or delete it, or object to certain processing. Send requests to privacy@jobrunner.co.za; we may need to verify your identity before acting. To delete your account, use Delete account in the app, or email support@jobrunner.co.za from the email address you sign in with (see jobrunner.co.za/delete-account). We confirm with you at that address before anything is deleted. If your information was entered into JobRunner by a business you deal with (for example a plumber who has you as a client), that business is the responsible party — we will refer your request to them, or you can contact them directly. You also have the right to complain to the Information Regulator (South Africa); details are in our POPIA Notice.

10. Cookies and analytics

The app uses cookies and similar technologies that are necessary to keep you signed in and the service secure. We use PostHog, hosted in the EU, to understand how the app is used: anonymous usage events and page views, with a random identifier stored in your browser and an approximate location worked out from your IP address. We do not record your screen. We use Sentry, hosted in the EU, to receive error reports (the device and browser type and what went wrong), so that we can fix faults. We do not use advertising or cross-site tracking cookies.

11. Children

JobRunner is a business tool and is not intended for use by anyone under 18.

12. Changes and contact

We may update this policy from time to time; material changes will be notified to account owners by email or in the app. Questions or requests: privacy@jobrunner.co.za.

Deletion requests: support@jobrunner.co.za, from the email address you sign in with.