StationX86 Privacy Policy

1. Overview & Data Controller Information

This Privacy Policy describes how StationX86 Technologies (Pty) Ltd ("StationX86", "we", "us", or "our", under the proprietary ownership of founder Naushad Mohamed) collects, processes, stores, and safeguards personal data and facility operational telemetry when you access the StationX86 Facility Intelligence & Asset Governance Platform (the "Service"), our mobile QR scan applications, and related websites (including stationx86.com).

StationX86 operates in strict compliance with international privacy frameworks including the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) and the Protection of Personal Information Act (POPIA - Act No. 4 of 2013, South Africa).

2. Categories of Information We Collect

3. Cloud Infrastructure & Security Measures

StationX86 is hosted on enterprise-grade Google Cloud Platform (GCP) infrastructure. We enforce multi-layered defense mechanisms:

• Encryption in Transit: TLS 1.3 encryption across all public and internal API endpoints.
• Encryption at Rest: AES-256 hardware-level encryption across cloud database volumes and media storage.
• Row-Level Security (RLS): Cryptographic isolation between client franchise tenants, preventing cross-organization leakage.
• Automated Backups: Point-in-time recovery and geographically distributed snapshot redundancy.

4. Purpose of Processing & Sub-Processors

We process data strictly to provide facility maintenance tracking, preventative scheduling, and regulatory OSH compliance verification. We do not sell, rent, monetize, or broker personal or operational data to third parties.

Approved enterprise sub-processors include: Google Cloud Platform (Cloud Hosting & Compute), Supabase / PostgreSQL (Encrypted Relational Database), Vercel Inc. (Global Edge Delivery), and Paystack / Stripe (PCI-DSS Level 1 Payment Processing).

5. Your Data Rights & Retention

Under GDPR and POPIA, you have the right to request access to your data, demand correction of inaccurate records, request complete account erasure, or export your maintenance ledgers.

To exercise any privacy rights, contact our Data Protection Officer at info@stationx86.com. Requests are verified and processed within 14 business days.

6. Privacy Inquiries & Corporate Office