Legal
Legal & Compliance
Last updated: 01 November 2026
Privacy Policy
CommHub ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).
What information we collect
- Name and email address (required for account creation)
- Organisation affiliation
- Message content and metadata (sender, recipient roles, timestamps)
- File attachments you upload
- Login activity and IP addresses (for security and audit)
How we use your information
- To facilitate structured communication within your organisation and its community
- To maintain an audit log of admin actions as required by governance frameworks
- To send you system notifications and invitation emails
- We do not sell, rent, or share your personal information with third parties for marketing purposes
Terms of Service
By using CommHub, you agree to these Terms of Service. These terms govern your use of our platform, including all messaging, administrative, and account features.
Acceptable use
- CommHub may only be used for lawful organisational communication purposes
- You must not use the platform to send unsolicited, offensive, or unlawful content
- Organisation administrators are responsible for the content broadcast through their instance
- Bulk messaging must comply with POPIA consent requirements
Billing
Subscription fees are billed monthly via debit order. Invoices are generated on the first of each month. Non-payment may result in account suspension after 14 days notice.
POPIA Compliance
CommHub is designed to support South African organisations' POPIA obligations.
Consent capture: All invitations include a POPIA notice. Users must accept before accessing the platform.
Data minimisation: We collect only the information necessary for platform operation.
Audit log: All admin actions are logged with timestamp and user ID for governance and accountability.
Right to erasure: Users may request deletion of their personal data by contacting their organisation admin.
Data residency: All data is stored in South African data centres.
Our Information Officer can be contacted at privacy@commhub.co.za.
Data Retention
We retain your data for as long as your account is active or as required by applicable law.
| Data type | Retention period |
|---|---|
| Messages | 3 years from send date |
| Attachments | 1 year or until manually deleted |
| Audit logs | 5 years (regulatory requirement) |
| Account data | Duration of account + 30 days after deletion |
| Invitation records | 1 year |
Have a question about our legal policies? Contact us at legal@commhub.co.za