Privacy policy

Last updated: 5 October 2026

This policy explains how iNdex Tech Solutions ("we", "us") processes personal information when you use iNdex Voice — our website, web app and mobile app — in accordance with the Protection of Personal Information Act, 2013 (POPIA).

1. Who is responsible

iNdex Tech Solutions is the responsible party for account and billing information. For call content and call records of a customer's business, the customer (your employer or the business you called) is the responsible party and we process that information on its behalf as an operator.

Information Officer: contact privacy@indextech.co.za.

2. Information we process

• Account information: name, email address, password (stored only as a secure hash), company name and role.
• Call records: calling and called numbers, caller name where provided by the network, date, time, duration, routing and outcome.
• Voicemail and recordings: audio of voicemail messages, and call recordings only if the business has enabled recording.
• Device information: device name, app version and push-notification token, used to deliver incoming calls.
• Billing information: billing contact, company registration and VAT numbers, usage records.
• Technical logs: IP addresses and security logs used to protect the service and prevent fraud.

3. Why we process it

To provide the service you or your employer signed up for (deliver and route calls, show call history and voicemail), to bill for the service, to secure the platform and prevent toll fraud, to meet legal obligations, and to communicate with you about your account. We do not sell personal information and do not use call content for advertising.

4. Call recording

Recording is disabled by default. A business that enables recording confirms that it will notify callers and comply with applicable law. An announcement can be played to callers automatically. Recordings are kept for the period the business configures and are then deleted.

5. Sharing

We share information only with service providers we need to run iNdex Voice — telecommunications carriers (to connect calls), cloud hosting, storage, email and push-notification providers — under written agreements that require appropriate security, or where the law requires it.

6. Cross-border processing

Some of our service providers process information outside South Africa. Where that happens, we ensure the recipient is subject to laws, binding agreements or corporate rules that provide adequate protection, as required by section 72 of POPIA.

7. Retention

We keep information only as long as needed for the purposes above or as required by law. Default periods: voicemail and recordings 90 days, call records 12 months, unless the business sets different periods or the law requires longer retention.

8. Security

Data is encrypted in transit (TLS, SRTP) and protected at rest. Access is role-based, customer data is logically isolated, and administrative actions are audit-logged. If we become aware of a security compromise affecting your personal information, we will notify you and the Information Regulator as required.

9. Your rights

You may request access to, correction of, or deletion of your personal information, object to processing, and lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za. You can download your data and delete your account yourself under Settings → Your data in the app or on the web; a company owner can also export the company's data and close the company there, after which its personal information is deleted within 30 days (billing records are kept as tax law requires). Contact privacy@indextech.co.za for anything else. Requests about a business's call records may be referred to that business.

10. Changes

We will post updates to this policy here and notify account owners of material changes.