Privacy Policy

Babelcom ("the System") is operated by Zero Admin (Pty) Ltd, a company registered in South Africa ("we", "us", "our"). We are committed to protecting personal information in compliance with the Protection of Personal Information Act 4 of 2013 (POPIA) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Information We Collect

The System collects the following categories of information:

• Device identity: cryptographically verified device identifiers for registered intercom and access control units.
• Access logs: timestamps and outcomes of access requests at controlled entry points.
• Audio and video: real-time audio and video streams during active intercom sessions. Streams are not recorded unless explicitly enabled by the premises operator.
• User account information: name and contact details of administrators and authorised users provided during onboarding.
• Network metadata: IP addresses and connection metadata for security monitoring purposes.

2. How We Use Your Information

• To authenticate devices and manage access permissions.
• To facilitate intercom communication between visitors and residents or staff.
• To maintain tamper-evident audit logs of access events.
• To detect and respond to unauthorised access attempts or security threats.
• To provide system diagnostics and operational monitoring to premises operators.
• To comply with our legal obligations.

3. Legal Basis for Processing

• Contractual necessity: to provide the access control and intercom services contracted by the premises operator.
• Legitimate interests: premises security, fraud prevention, and system integrity.
• Legal obligation: where required by South African law or applicable regulation.
• Consent: for any optional features involving personal data collection beyond the above.

4. Data Controller and Processor Relationship

Where Babelcom is deployed by a premises operator (body corporate, business, or property manager), that operator acts as the data controller for personal information of residents, visitors, and staff. Zero Admin (Pty) Ltd acts as a data processor on their behalf. Premises operators are responsible for ensuring they have a lawful basis for operating the System and for informing data subjects accordingly.

5. Third-Party Services

The System uses the following infrastructure services:

• Cloudflare — DNS and network-layer security.
• RabbitMQ — on-premises message brokering (no data leaves the installation by default).

By default, Babelcom is designed for on-premises deployment. Data does not leave the installation unless cloud features are explicitly enabled by the operator.

6. Access Logs and Retention

Access logs are retained for a minimum of 90 days by default. Premises operators may configure longer retention periods in accordance with their own security policies and legal requirements. Operators are responsible for complying with POPIA obligations regarding the retention of access records.

7. Security

The System uses hardware-backed device identity verification, encrypted communications (TLS), and tamper-evident audit logging. Access to administrative functions is restricted to authorised personnel via role-based access controls.

8. Your Rights

Individuals whose data is processed by the System may exercise rights under POPIA (and GDPR where applicable) including access, correction, and deletion. Requests relating to data held by a premises operator should be directed to that operator. Requests relating to Zero Admin (Pty) Ltd's own processing should be directed to privacy@somewhatlabs.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered operators via email. Continued use of the System after changes constitutes acceptance of the updated policy.

10. Contact

Zero Admin (Pty) Ltd
Johannesburg, South Africa
privacy@somewhatlabs.com