What we collect, why, who helps us process it, how long we keep it, and how to ask us about it. Written to meet South Africa’s Protection of Personal Information Act (POPIA).
Fabristack is run by Atticdevs (Pty) Ltd (registration number 2026/053465/07). In this policy, “we” means that company.
For the personal information we decide how to use, such as your account details, we are the responsible party under the Protection of Personal Information Act (POPIA). Our Information Officer is Marco Karsten, reachable at contact@atticdevs.com.
For the information your company puts into Fabristack about other people, such as your customers and suppliers, your company is the responsible party and we are its operator: we store and process it only to run Fabristack for you.
On this website. If you join the launch list: your email address and, if you give it, your company name. Before it’s saved, Cloudflare Turnstile checks invisibly that you’re a person and not a bot.
Visits to this website. We count visits with Vercel Web Analytics, which uses no cookies and doesn’t identify you. For each page view it records the page, the site that sent you, your country and region, and your browser, operating system and type of device. Visitors are told apart for a day by a code made from the request, which is then thrown away, and we only see totals. There are no advertising trackers.
In the app. What your company and its team put in, which can include:
Billing. Which modules you subscribe to and your payment history. Card payments are taken by Paystack: we never see or store your card number.
Technical. The records needed to keep you signed in and the service secure, such as sign-in times and error logs. When you join the launch list, sign in or create an account in the app, Cloudflare Turnstile checks that you are a person and not a bot. It runs invisibly, without a puzzle, and processes your IP address and technical details of your browser or device (see Who helps us run it).
We don’t sell personal information, use it for advertising, or share it with anyone except the service providers below. We only use your information for what you gave it for, unless the law requires otherwise.
These service providers process personal information for us, only as needed for what they do. We may change providers, for example to host the app somewhere else. When we do, we update this list and hold the new provider to the same standard.
Some of these process information outside South Africa. POPIA allows this where the information stays protected by law or agreement to a standard like POPIA’s, and we only use providers that commit to that. Switzerland’s data protection law is recognised as giving that protection.
Information is encrypted on its way to and from Fabristack. Inside the app, people only see what their role allows, and that rule is enforced by the database itself, not only by the app. Your customers see only their own order’s tracking page, through its link.
If a breach puts your personal information at risk, we will tell you and the Information Regulator as POPIA requires.
Under POPIA you can ask us:
Email contact@atticdevs.com. We reply within 30 days. If your information was put into Fabristack by a company that uses it, such as a supplier you buy from, we will pass your request to that company, since it decides what happens to it.
If you’re unhappy with how we’ve handled your information, you can complain to the Information Regulator: inforegulator.org.za.
Fabristack is a tool for businesses. It isn’t meant for anyone under 18, and we don’t knowingly collect their information.
If we change this policy in a way that affects you, we’ll email account owners at least 30 days before it applies. The date at the top shows when it last changed.