DRAFT: this text is a starting point, not legal advice. It must be reviewed by a South African attorney, and the highlighted details filled in, before WISPMap takes on paying customers.

Privacy policy

This policy explains what personal information WISPMap collects, why, where it is kept and what your rights are under the Protection of Personal Information Act, 2013 (POPIA).

1. Who we are

WISPMap is operated by [company name and registration number] ("we", "us"), the responsible party for the personal information described here. Information officer: [information officer's name]. Contact: [contact email].

2. What we collect

• Account information: the names, email addresses and roles of the people your organisation invites, and login times. Passwords are stored only as one-way hashes.
• Network monitoring data that your collector sends: device names, management IP addresses, interface names and traffic counters, latency and loss, router uptime and versions, OSPF neighbours, and the site locations you enter. This is information about equipment, not about your subscribers. Device or site names you choose may still contain personal information (for example a customer's name), so choose them with that in mind.
• Alert settings: email addresses and Telegram chat IDs that you configure for notifications.
• Technical logs: IP addresses and request logs, kept for security and troubleshooting.

Router passwords are never collected. They stay on the collector inside your network and are never sent to us.

3. Why we use it

We use this information only to provide the service: showing your network's status, detecting outages, sending the alerts you set up, securing accounts, and support. We do not sell personal information or use it for advertising.

4. Where it is stored and who processes it

• Hosting: servers in South Africa (sive.host, Samrand data centre, Gauteng).
• Email delivery: [email provider].
• Telegram, if you choose Telegram alerts: alert text is delivered through Telegram's servers, which may be outside South Africa.
• Map tiles: when you view the map, your browser loads map images from OpenFreeMap. Those providers see your IP address and which area of the map you are viewing, but none of your network data.

Where information is processed outside South Africa, we rely on providers that protect it to a standard comparable to POPIA.

5. How long we keep it

• Detailed monitoring samples: 7 days. 5-minute summaries: 90 days. Hourly summaries: 2 years.
• Incidents and account data: while your account is active.
• When you close your account, we delete your organisation's data within 30 days. Encrypted backups are overwritten within a further 30 days.

6. Security

We use encryption in transit (HTTPS), hashed passwords, rate-limited logins, per-organisation data separation, and restricted server access.

7. Cookies

We use only strictly necessary cookies: a session cookie that keeps you logged in, and a security token that protects forms. There are no tracking or advertising cookies.

8. Your rights

You may ask to see, correct or delete your personal information, and object to its processing, by emailing [contact email]. If you are not satisfied with our response, you may complain to the Information Regulator (South Africa): inforegulator.org.za.

9. Changes

We will tell account owners by email before material changes take effect.

Last updated: 25 October 2026