Who we are
LockFleet is operated by Sweet Phoenix Creations (Pty) Ltd in South Africa. Contact us at info@sweetphoenix.co.za.
For account and commercial administration we act as the responsible party. When a business uses LockFleet to manage its company devices, that business normally decides why its workforce and device information is processed and we act as its operator or service provider.
Information we process
We process administrator email addresses, business and role details, invitations, business-managed contact-directory entries, trial and subscription status, device identifiers, model and operating-system information, policy state, application inventory, enrolment events, device health, data-usage totals, command results, support-session events and security audit logs.
Managed contact entries are isolated to the customer workspace that created them and are sent only to that customer's authorised phones with contact synchronisation enabled. Payment card details are handled by the configured payment provider and are not stored by LockFleet. Private APK files are stored in protected object storage with integrity metadata.
Monitoring boundaries
LockFleet is designed for company-owned device administration. It does not provide secret interception of WhatsApp messages, personal message content, passwords or encrypted communications.
Domain or category-level network reporting requires a separately configured managed DNS or VPN gateway. Visible remote screen support requires user approval on the phone. Businesses must provide appropriate monitoring notices and use controls only for a lawful, proportionate purpose.
Why we use information
Information is used to provide and secure the service, authenticate administrators, enrol and administer devices, enforce approved policies, deliver applications, diagnose failures, provide support, manage trials and subscriptions, prevent abuse and meet legal obligations.
Depending on the relationship and jurisdiction, processing may be based on a contract, legitimate operational and security interests, legal duties, or consent where the platform requires it.
Service providers and transfers
LockFleet may use Cloudflare for hosting, databases, file storage, security and access; Google Android Enterprise services for managed devices and applications; and Paystack for payment processing when enabled. These providers process only the information needed for their role and may process information outside South Africa under their contractual and security arrangements.
Retention and deletion
Operational information is kept while a workspace is active and for a limited period needed for security, support and dispute handling. Pending enrolment secrets and support tokens expire automatically. Screen-share frames are relayed live and are not intentionally recorded by LockFleet.
When an account deletion request is completed, associated account and operational data is deleted or de-identified, subject to records that must be retained for tax, accounting, fraud-prevention, security, legal claims or another lawful requirement. Retained records are restricted to those purposes.
Security
We use tenant isolation, role-based access, encrypted transport, short-lived tokens, audit records, application checksum and signing-certificate verification, protected object storage and infrastructure access controls. No internet service can guarantee absolute security, so suspected incidents should be reported promptly.
Your choices and rights
Subject to applicable law, you may ask for access, correction, objection, restriction or deletion of personal information. Account deletion is available from the dashboard and our account deletion page. Requests may require identity verification.
South African data subjects may also contact the Information Regulator.
Changes and contact
We may update this policy as the service or legal requirements change. Material updates will be dated and, where appropriate, shown to administrators before they continue using the service.
Privacy enquiries: info@sweetphoenix.co.za.