Privacy Policy

1. Information We Collect

We collect the following types of information:

2. How We Use Your Information

• To create and manage your account and provide access to the Service.
• To display regulatory application statuses relevant to your company.
• To send automated daily email reports when application statuses change.
• To respond to support requests and enquiries.
• To monitor platform usage and improve Service performance and security.
• To comply with applicable legal obligations.

3. Data Storage and Security

Your data is stored in Google Firebase (Firestore and Firebase Storage), hosted in secure Google Cloud infrastructure. We implement industry-standard security measures including:

• Encrypted data transmission over HTTPS (TLS).
• Firebase Security Rules to ensure strict client data isolation — each company only accesses its own data.
• Admin-only access to raw database operations via Firebase Admin SDK with server-side token verification.
• Passwords are never stored in plaintext — hashed and managed by Firebase Authentication.

4. Data Sharing

We do not sell, rent, or trade your personal information. We may share data with:

• Google Firebase: For database, authentication, and file storage. See Firebase Privacy Policy.
• Resend: For sending automated email reports. Only your email address is shared for this purpose. See Resend Privacy Policy.
• Legal authorities: If required by South African law, court order, or regulatory requirement.

5. Cookies

RBC TrackSure uses only essential session cookies required for authentication (Firebase Auth session tokens). We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No consent banner is required as only strictly necessary cookies are used.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove your personal data from our active databases within 30 days. Application tracking data associated with your Client ID may be retained in anonymised form for internal analytics purposes.

7. Your Rights (POPIA)

Under POPIA, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate personal information.
• Request deletion of your personal information (subject to legal retention requirements).
• Object to the processing of your personal information in certain circumstances.
• Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, contact us at info@rbc-tracksure.co.za.

8. Children's Privacy

RBC TrackSure is a professional B2B platform intended for use by pharmaceutical and regulatory professionals. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that a minor has registered, we will delete their account.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the platform. Your continued use of the Service after changes constitutes your acceptance of the updated policy.

10. Contact Us

For privacy-related enquiries or to exercise your rights, please contact our Information Officer: