Privacy Policy

PinPoint ("we", "us", "our") is a customer map intelligence platform operated by One Day Car (Pty) Ltd, trading as OneDayCar (ODC), a company registered in the Republic of South Africa. PinPoint is accessible at dealerpinpoint.com.

This Privacy Policy explains how we collect, use, store, and protect personal information when you use the PinPoint platform. It applies to all dealers, users, and individuals whose data is processed through our platform.

By using PinPoint, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the platform.

One Day Car (Pty) Ltd (registration number to be confirmed) is the responsible party for personal information processed through PinPoint, as defined under the Protection of Personal Information Act 4 of 2013 (POPIA).

Contact: pinpoint@onedaycar.co.za

3.1 Dealer account information

• Dealership name, contact name, email address, phone number, region
• Dealership physical address (used for distance calculations)
• Login credentials (email and password, stored securely via Supabase Auth)

3.2 Customer data uploaded by dealers

When a dealer uploads a customer list, that file may contain personal information about the dealer's customers, including:

• Customer names
• Physical addresses and postal codes
• Vehicle purchase details (model, price, date)
• Service history details (dates, spend)
• Salesperson names

PinPoint processes this data strictly as an operator on behalf of the dealer. The dealer is the responsible party for their customers' personal information. The dealer confirms by using PinPoint that they have a lawful basis for sharing this data with us and that their customers' information is being handled in compliance with POPIA.

3.3 Usage data

• Login times, pages visited, and feature usage within the platform
• IP address and browser/device information (collected automatically)

• To operate and deliver the PinPoint service — mapping, analysis, and AI-generated insights
• To geocode customer addresses via the Google Maps Geocoding API
• To render customer maps via Mapbox GL JS
• To generate AI-powered insights and chat responses via the Anthropic Claude API
• To send automated email notifications relating to your account and runs
• To process payments via Paystack
• To improve the platform and diagnose technical issues
• To comply with our legal obligations

We share data with the following third-party processors to deliver the PinPoint service. All processors are bound by appropriate data protection obligations:

Customer names and personal identifiers are never sent to Anthropic. Only anonymised, aggregated data (suburb counts, value ranges, vehicle categories) is included in AI queries.

• Standard retention: customer data is retained for 12 months from the run date, then permanently deleted
• Extended retention: where a dealer has purchased extended retention, customer data is retained for 24 months from the run date, then permanently deleted
• Dealer account information is retained for as long as the account is active
• On account deletion, all associated data is permanently deleted within 30 days
• Automated deletion: a 30-day warning is sent before customer data is deleted. Data is hard-deleted on expiry — it cannot be recovered after this point.

We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encrypted data transmission (HTTPS/TLS)
• Secure database hosting via Supabase with row-level security
• Password hashing and secure authentication
• Access controls limiting who can access production data

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information using industry-standard practices.

As a data subject or as a dealer responsible for your customers' data, you have the following rights under POPIA:

• The right to access personal information we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of your personal information
• The right to object to the processing of your personal information
• The right to lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at pinpoint@onedaycar.co.za. We will respond within a reasonable time and in compliance with POPIA requirements.

PinPoint uses essential cookies required for authentication and session management. We do not use advertising cookies or track users across third-party websites. Usage analytics may be collected to improve the platform.

PinPoint is a business-to-business platform not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors.

We may update this Privacy Policy from time to time. Where changes are material, we will notify registered dealers by email. Continued use of the platform after notification constitutes acceptance of the updated policy. The current version is always available at dealerpinpoint.com.

For any privacy-related queries, requests, or complaints:

• Email: pinpoint@onedaycar.co.za
• Platform: dealerpinpoint.com
• Responsible party: One Day Car (Pty) Ltd, South Africa

PinPoint Privacy Policy · Effective April 2026 · One Day Car (Pty) Ltd