Privacy Policy

Last updated: 13 August 2026

This policy explains what ManufacturedOn (“we”, “us”) collects when you use ManufacturedOn (the “Service”), why we collect it, where it is stored, and what you can ask us to do with it. It covers both this website and the application at app.manufacturedon.com.

What we collect

• Account information — your name, email address, company name, and a hash of your password. Passwords are never stored in a readable form.
• Business data — the customers, suppliers, products, orders, stock movements, invoices and documents you create or upload. This is your data. We hold it to provide the Service and for no other purpose.
• Personal information inside your data — your records may contain details about your own customers, staff or contacts. You control what goes in; we process it on your behalf.
• Operational logs — request metadata such as IP address, user agent and timestamp, used to run the Service and investigate abuse or faults.
• Cookies — a session cookie so you stay signed in. This marketing site sets no third-party advertising or tracking cookies.

Why we collect it

To operate the Service and provide it to you, to contact you about your account, to keep the Service secure against abuse, and to meet our obligations under the Protection of Personal Information Act (POPIA) and other applicable law. We do not sell your data, and we do not share it with third parties for their own marketing.

Where your data lives

The Service runs on infrastructure operated by:

• Vercel — application hosting
• Amazon RDS for PostgreSQL, eu-north-1 (Stockholm, EU) — the primary database
• Amazon S3, eu-north-1 (Stockholm, EU) — uploaded files and documents

Your data is therefore stored in the European Union rather than in South Africa. Where POPIA requires it, this transfer relies on the destination being subject to law that provides an adequate level of protection — EU-hosted data is governed by the GDPR, which imposes protections substantially similar to POPIA's conditions for lawful processing.

How it is protected

• All traffic is served over TLS, with HSTS enforced.
• Particularly sensitive fields — banking and tax identifiers among them — are encrypted at rest in addition to the database's own encryption.
• Access inside the product is controlled by granular per-user permissions, and tenants are isolated from one another at the database level.
• Changes to significant records are written to an audit log recording who made them and when.
• Sessions expire, and signing out or closing the browser ends the session.

Subprocessors

We keep the list short deliberately. Beyond the hosting providers above, we use an email delivery provider for transactional mail (invitations, password resets, notifications) and an error-reporting service that receives diagnostic data when something breaks. Current provider details are available on request from privacy@manufacturedon.com.

How long we keep it

We keep your data for as long as your account is open. After you close an account we retain the minimum needed for legal, tax and audit purposes — in South Africa, financial records generally carry a five-year retention obligation — and delete the rest.

Your rights

Under POPIA you may:

• Access the personal information we hold about you, and get a copy. Every list view in the product exports to CSV or Excel, so most of this is self-service.
• Correct anything inaccurate — directly in the product, or via us.
• Delete your data by closing your account, or by writing to us.
• Object to processing, or withdraw consent where we relied on it.
• Complain to the Information Regulator of South Africa if you believe we have handled your information unlawfully.

To exercise any of these, email privacy@manufacturedon.com. We will respond as quickly as we reasonably can.

Data breaches

If personal information is accessed or acquired by an unauthorised person, we will notify affected users and the Information Regulator as required by POPIA, as soon as reasonably possible after establishing what happened.

Changes to this policy

If we make a material change we will update the date at the top of this page and, where the change materially affects you, tell you by email or in-app notice before it takes effect.

Contact

Privacy questions and rights requests: privacy@manufacturedon.com. For the terms governing use of the Service, see our Terms of Service.

This policy describes our actual practices in plain language. It is not legal advice, and it is not a substitute for a policy reviewed by your own counsel.