Roles, privacy and who sees what
PoPIA and GDPR in practice, and how access is enforced twice.
3 min read
Five roles
Give people the smallest role that lets them do their job.
- Super admin: owns the workspace and its people.
- Campaign manager: builds and runs campaigns, and manages providers.
- Reward manager: loads and issues rewards, and manages providers.
- Analyst: reads results and builds reports.
- Viewer: reads dashboards only.
Checked in two places
Every request is checked by the endpoint being called and again by the database itself. Names and mobile numbers are readable only by roles allowed to see them; everyone else gets partly hidden numbers and totals. Live updates on dashboards carry counts, never personal details.
Rights requests
A recipient can ask to be removed and their anonymous answers stay, so your reporting still adds up. A portal user can download everything held about them. Each request is logged with who handled it and when.
Everything is written down
The access trail records who looked at what, who changed a setting and who sent a message, and you can page through and drill into it.
Try it on your own phone
Create a workspace, load one contact, and send yourself a test survey before you send it to anyone else.
Open the portal