Skip to content
    Allocky

    Privacy Policy

    Last updated 11 October 2026.

    This policy explains what personal information Allocky processes, why, who it is shared with, and the rights you have, including under South Africa's Protection of Personal Information Act (POPIA).

    1. Who is responsible

    The responsible party under POPIA is Allocky. For privacy or POPIA-related enquiries, contact Allocky's Information Officer at info@allocky.com.

    2. Information we process

    • Account information: name, email address and login credentials.
    • Workspace and membership data: workspaces you belong to, your role and invitations.
    • Planning data entered by your workspace: resources (people), projects, tasks, allocations and working patterns.
    • Leave and non-working days recorded for people.
    • Utilisation share links: the scope selected and whether a link is active or revoked.
    • Billing records: plan, billing period, payment references and PayFast transaction identifiers. Card details are not received or stored by Allocky.
    • Authentication and session information needed to keep you signed in.
    • Operational and security logs created when the service is used.

    3. Why we process it

    • To provide the service your workspace has signed up for.
    • To manage subscriptions, trials and payments.
    • To keep the service secure and investigate misuse.
    • To send service emails such as invitations and password resets.
    • To meet legal obligations.

    We process information because it is needed to perform our agreement with you, for our legitimate interest in running a secure service, or to comply with the law.

    4. Who we share it with

    We use service providers to run Allocky, including Supabase (database and authentication), our application hosting platform, an email delivery provider and PayFast (payment processing). They process information on our behalf for these purposes. We do not sell personal information.

    5. Where information is processed

    Allocky uses third-party cloud infrastructure to host the service.

    6. How long we keep it

    Allocky retains personal information only for as long as necessary for the purposes for which it was collected, or as required by applicable law, regulatory obligations, dispute resolution, or enforcement of agreements. When information is no longer required, it will be deleted or anonymised where appropriate.

    7. Security

    Access to workspace data is restricted by account and role, and share links show only the scope selected. No method of storage or transmission is completely secure, and we will notify affected people and the Information Regulator of a security compromise where POPIA requires it.

    8. Your rights

    You may ask to access, correct or delete your personal information, object to certain processing, or withdraw consent where processing relies on it. Send requests to info@allocky.com. Workspace planning data is controlled by your workspace, so some requests may be passed to its owner.

    9. Complaints

    Please contact us first. You may also complain to the Information Regulator (South Africa).

    10. Cookies and local storage

    Allocky does not use analytics, advertising or third-party tracking cookies. Your sign-in session is kept in your browser's local storage, and the signed-in application stores a small preference (for example, whether the sidebar is open). These are needed for the service to work. PayFast may set its own cookies on its payment pages.

    11. Changes

    We will update the date at the top of this page when this policy changes, and notify workspace owners of material changes.