Privacy Policy

This policy explains how Kinara Consulting (Pty) Ltd(registration number 2025/871359/07, "Kinara," "we," "us"), operating Nahshon SPLT, collects, uses, and protects personal information in connection with the Nahshon platform (nahshon.co.za), in line with the Protection of Personal Information Act, 4 of 2013 ("POPIA").

Kinara's other products (Qlaim, Iddan PFT) and the Kinara Consulting corporate website each have their own privacy policy.

An important distinction: two kinds of data on Nahshon

Nahshon is sold to organisations (e.g. estate agencies) to help their own sales teams track leads and calls. Two different categories of personal information exist on the platform, and they work differently under POPIA:

• Your Nahshon account (if you're a manager or agent) — Kinara Consulting is the responsible party for this data. See below.
• Lead records (the prospective customers your organisation's agents log calls with) — your organisation is generally the responsible party for this data, not Kinara. Kinara holds it as an operator, providing the software your organisation uses to store and process it. If you are a lead whose details appear in someone's Nahshon account, your enquiry about that data should go to the organisation that collected it (e.g. the estate agency you spoke to), not Kinara directly — though we will assist that organisation in responding to you.

Who is responsible for your information

What we collect

• Manager and agent accounts — full name, email address, password (via Supabase Auth), role, and branch assignment.
• Lead and activity records (entered by your organisation's users, about their own prospective customers) — a lead's name, phone number, pipeline stage, and call notes.
• Voice dictation (optional) — if you use the microphone icon to dictate call notes, Nahshon uses your browser's built-in speech recognition. In browsers such as Chrome, this sends the audio to the browser vendor's (e.g. Google's) speech-recognition service to convert it to text. Nahshon itself does not record or store the audio — only the resulting text is saved.
• Invite records — the email address of anyone your organisation invites to join Nahshon, until they accept or the invite expires.

Why we collect it

To let your organisation's sales team log calls and manage leads, give managers visibility into team activity and performance, and onboard new team members via invites.

How we share it

• Resend — to deliver transactional emails (password resets, invites).
• Your browser's speech-recognition provider — only if you actively use voice dictation, and only the audio you dictate.

We do not sell or rent personal information to third parties.

International data transfers

Our database infrastructure (Supabase) stores data in Ireland, within the European Union, where it is protected under the EU General Data Protection Regulation (GDPR) — a data protection framework substantially similar to POPIA. Resend, our email delivery provider, is also based outside South Africa. If you use voice dictation, your browser sends the audio to its speech-recognition provider (e.g. Google), which is also based outside South Africa. Where personal information is transferred outside South Africa, we only do so where the recipient is subject to a law, binding corporate rules, or a binding agreement that provides an adequate level of protection substantially similar to POPIA, or another ground permitted under section 72 of POPIA.

How long we keep it

Account and lead data is retained for as long as your organisation's Nahshon account is active. If your organisation's relationship with Kinara ends, data is retained only as long as reasonably necessary to hand it over or delete it at your organisation's instruction.

Your rights under POPIA

• Confirm what personal information we hold about you and request a copy of it
• Ask us to correct inaccurate information, or delete it where there's no lawful reason to keep it
• Object to processing or withdraw consent where applicable
• Lodge a complaint with the Information Regulator if you believe your information has not been handled properly

For your own Nahshon account, contact our Information Officer using the details above. For lead data, please contact the organisation that collected it in the first instance.

Security

Row-level security is enabled on every table in our database, all data access goes through server-side, service-role-scoped routes rather than direct client access, and passwords are managed by Supabase Auth rather than stored by us directly.

Complaints to the Information Regulator

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision.