Privacy Policy
Last updated: 3 March 2026
1. Introduction
G-Matrix Systems (Pty) Ltd ("we", "us", "our") operates the G-Matrix Notify platform at notify.ramacsystems.com. This policy explains how we collect, use, and protect personal information when you use our service.
2. Information We Collect
- Account information: name, email address, and password when you register or are provisioned as a client.
- Device and tracking data: GPS tracker identifiers, vehicle labels, and event data (speed, location, geofence triggers) received from the Navixy platform on behalf of our clients.
- Contact details: phone numbers of employees/drivers assigned to devices, used solely to deliver WhatsApp notifications.
- Message logs: records of WhatsApp messages sent, including timestamps, delivery status, and recipient phone numbers.
- Payment information: transaction references processed through PayFast. We do not store credit card numbers.
- Usage data: login times, IP addresses, and browser information for security and troubleshooting.
3. How We Use Your Information
- Deliver real-time WhatsApp event notifications to designated recipients.
- Manage client accounts, credit balances, and billing.
- Send transactional emails (welcome, password reset, low-credit alerts, weekly summaries).
- Monitor system health and prevent abuse.
- Comply with legal obligations.
4. Data Sharing
We share personal data only with the following third-party services, strictly for the purposes described:
- Meta (WhatsApp Cloud API): recipient phone numbers and message content for delivery.
- SendGrid: email addresses for transactional emails.
- PayFast: payment processing for credit top-ups.
- Navixy: GPS tracking data received via API integration.
We do not sell, rent, or trade personal information to any third party.
5. Data Security
We implement industry-standard security measures including:
- TLS/SSL encryption for all data in transit.
- Bcrypt password hashing with enforced password policies.
- JWT-based session management with configurable expiry.
- Account lockout after repeated failed login attempts.
- Containerised infrastructure with restricted network access.
6. Data Retention
Message logs and transaction records are retained for 24 months for billing and audit purposes. Account data is retained for the duration of the client relationship and deleted within 90 days of account closure upon request.
7. Your Rights
In accordance with the Protection of Personal Information Act (POPIA) of South Africa, you have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of your personal information.
- Object to the processing of your information.
8. Data Deletion
To request deletion of your data, contact us at gary@g-matrixsystems.com. We will process your request within 30 days.
9. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated revision date.
10. Contact
For questions about this privacy policy, contact:
G-Matrix Systems (Pty) Ltd
Email: gary@g-matrixsystems.com