You are putting your customers into our system. Here is exactly what happens to them.
Written in plain English, and checked against what the software actually does rather than what we would like it to do. The legal version is the privacy policy.
The short answer
What a stranger sees if they scan your tag
They see
- What the unit is: type, brand, model, rating
- Who installed it, with your phone, WhatsApp and registration numbers
- Install date, warranty end and next service date
- The service history on that one unit
- Photos, compliance documents and the address, only if you switched that unit to full visibility
They never see
- The customer's name
- Their phone number
- Their email address
- What else you have installed for them
- Anything at all about your other customers
That is not a setting you have to find. A passport is built without the customer on it, so there is nothing to leak, even to somebody reading the page source.
How it is kept that way
Six things, each checked against the code
Not promises. Each of these is how the software is built, and the numbers below are read out of it rather than typed onto this page.
A passport says nothing about the person
Scan any tag, including one that is not yours, and you see the equipment and the installer. The customer's name, number and email are not in the response at all, so there is nothing to find in the page source either.
Only the person holding the tag gets in
A passport is reached by its code, printed on the tag on the unit. Codes are random from a 30 character alphabet, and every passport page tells search engines not to index it, so no unit of yours turns up in a search result.
A homeowner proves who they are
Looking up every unit at an address needs a code emailed to the address their installer already has for them. It lasts 10 minutes, allows 5 attempts and is rate limited per address and per network, so a stranger with a phone number cannot browse somebody's home.
You choose what a scan shows
Photos, compliance documents and the install address are off unless you turn a unit to full visibility. That is a per unit decision, taken by you, and you can change it after the tag is already stuck on.
We never see a card
Payments run through Paystack, a South African provider. Card details are entered on their page and never touch InstallPass. All we are ever told is that a payment worked.
Delete means delete
Ask us to remove a customer and their details go, including their booking requests and enquiries. The unit and its service history stay, because that record belongs to the equipment and the next owner of the house.
The POPIA part, in one paragraph
Your customers are yours. You are the responsible party, we are the operator.
POPIA splits the job in two. The responsible party decides why personal information is collected and what happens to it; the operator processes it on their instruction and may not do anything else with it. You decide which customers go into InstallPass and what you send them. We hold it, keep it safe and do what you ask with it, and nothing more. We do not sell it, we do not share it with other installers, and we do not use your customers to advertise to anyone.
Questions
What installers ask before they sign up
Something here not answered, or not good enough? Ask us or write to info@installpass.com.
From the blog
Guides for installers who want repeat work
What one repeat call-out is worth: the numbers behind service work
A new install is a one-off. The services that follow it are not. Here is how to work out what a customer who keeps calling you is actually worth.
Security and CCTV installers: turning alarm and camera installs into service work
Alarm batteries go flat, recorder drives fill up and cameras drift out of focus. Here is how to make sure the call comes to you when they do.
A home equipment register: what to keep for your geyser, inverter and gate motor
Every house has a handful of units that need servicing, carry a warranty and come up when you sell. Here is what to keep for each, and where to keep it.
In their words
What installers say about it
The same story in every trade: a tag that stays on the unit is what brings the next job back to the person who fitted it, years after the invoice was paid.
Three geysers I fitted in 2023 came back to me this winter instead of going to whoever was cheapest on Google. The tag was still on the pipe and they scanned it.
The rating plate photo doing the typing is the part my guys actually use. Before this, half the job cards came back with the serial number missing.
A customer phoned about a warranty claim from two years ago. I had the certificate of compliance and the install date on screen before she finished the sentence.
Every install, on record.
Start your free trial and tag your first unit today. Fourteen days of every Pro feature, on real installs. If the bookings do not come back, you have lost nothing but an afternoon.
No card needed · 10 free self-print tags