Operator agreement
VoltAdmin · Last updated 16 August 2026
This is the written agreement section 21 of POPIA requires between you and us about your customers' information — the clients, quotes, jobs and invoices you put into VoltAdmin. It forms part of the terms of service and applies for as long as you have an account.
What we hold about you is a different question with a different answer, and it is in the privacy policy.
1. Which of us is which
You are the responsible party. You decide whose details go into VoltAdmin and why. They are your customers, your records, and your obligations to them.
We are the operator. We hold and secure that information on your behalf, and we process it only to run the software for you.
This is not a formality. It decides who answers when one of your customers asks a question:
- "Why does VoltAdmin have my address?" — You answer. We hold it because you put it there.
- "Delete my details." — You action it, in the product. We will not delete one of your customers' records on their say-so, because we cannot verify their relationship with you and it is not ours to remove.
- "Send me everything you hold about me." — You answer, from your own records.
We will help you answer any of these. We will not answer them instead of you.
2. What we undertake (section 21(1) and 21(2))
- We process only on your instruction. Storing, displaying, rendering, emailing and exporting your records is what running the software means, and it is the whole of the instruction. We will not use your customers' details for anything else.
- We do not use it for our own purposes. We do not market to your customers, sell or share their details, build profiles, or train machine-learning models on your data.
- We keep it confidential, and everyone who works on VoltAdmin is bound to the same.
- We secure it — the measures in clause 4 below, which are section 19's "appropriate, reasonable technical and organisational measures", stated specifically rather than as a general assurance.
- We tell you immediately if there are reasonable grounds to believe it has been accessed by anyone unauthorised, so that you can meet your own section 22 obligations. Immediately means as soon as we know, not after we have finished investigating.
- We use no sub-operator without telling you. The current ones are listed in the privacy policy, clause 4, and each is bound to these same terms.
3. What you undertake
- You have a lawful basis for the information you put in — usually that it is necessary to quote for or carry out work someone asked you to do.
- You tell your customers what you do with their details, as POPIA requires of a responsible party. Naming the software you use is not required; being able to answer questions about their information is.
- You keep your access under control — you do not share logins, you remove staff who leave (Settings → Team, which revokes their sessions immediately), and you switch on two-step sign-in where the business has staff.
- You do not put in what you do not need. VoltAdmin has no field for an ID number, a medical detail or anything else POPIA calls special personal information, and the notes fields are not the place for them.
4. How your customers' information is protected
The measures section 19 asks for, as they actually exist:
| In transit | TLS, with HSTS. No plain HTTP path into the product |
| At rest | On a managed server with encrypted, off-site backups |
| Separation | Every business's data is scoped to it in the query, not in the interface. That scoping is tested automatically on every change, with two businesses in the database, because a test with one cannot tell the difference |
| Access | Role-based — Owner, Admin, Staff — enforced in the permission layer rather than by hiding buttons. A staff member cannot reach your pricing or your financial totals |
| Credentials | scrypt-hashed passwords, session tokens stored only as hashes, optional two-step sign-in |
| Public links | The quote-accept link and the intake form carry 256-bit tokens, stored only as hashes, rate limited, single use where it matters |
| Uploads | Only your logo, checked by sniffed content rather than filename, re-encoded, stored outside the web root and served through an authenticated route |
| Our staff | No general access to production data and no root database access; support access only for a specific request you have raised |
| Audit | An activity log you can read yourself, and structured server logs with secrets redacted |
5. When it ends
When your account ends — because you closed it, or because the subscription lapsed and the retention period ran out — we delete your customers' information on the schedule in the privacy policy, clause 5. You can take a copy at any time from Settings → Export everything, and we recommend doing so before you close an account, because after deletion we cannot produce it again.
We keep no copy afterwards, beyond the record that a deletion happened: the business's name, the date, who asked, and how many rows went.
Backups are the one honest exception. A deleted business disappears from the live system immediately and ages out of the encrypted backup rotation within [retention window — see deployment.md]; a backup is never used to resurrect a deleted account, only to recover the system as a whole after a failure.
6. If your customer complains to us
We will tell you, promptly, and point them back to you as the responsible party. Where the Information Regulator requires something of us directly, we will do it and keep you informed.
[registered entity name] · Information Officer [name], [email]