Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, company details, VAT number, registration number and address provided during registration.
• Financial Documents: Receipts, invoices and related financial documents that you upload to our platform.
• Usage Data: Information about how you use our service including log data, device information and IP addresses.
• Payment Information: Billing details processed securely through our payment provider. We do not store complete payment card details.

2. How We Use Your Information

We use your information to:

• Provide and improve our service
• Process transactions and send related information
• Send administrative information and service updates
• Respond to your comments and questions
• Comply with legal obligations

3. Data Storage and Security

Your data is stored on secure servers provided by Supabase. We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. All data is encrypted in transit using TLS and at rest.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Upon account termination your data is retained for 30 days before permanent deletion. Financial documents may be retained longer if required by applicable law.

5. Sharing of Information

We do not sell your personal information. We may share your information with service providers who assist in our operations, when required by law or legal process, to protect the rights and safety of Pocket Proof and its users, or with your consent.

6. Your Rights Under POPIA

As a data subject under POPIA you have the right to:

• Access your personal information
• Request correction of inaccurate information
• Request deletion of your information
• Object to the processing of your information
• Lodge a complaint with the Information Regulator of South Africa

7. Your Rights Under GDPR

If you are located in the European Economic Area you have additional rights including the right to data portability, the right to restrict processing, and the right to withdraw consent at any time.

8. Cookies

We use essential cookies to maintain your session and provide our service. We do not use tracking or advertising cookies. You can control cookies through your browser settings.

9. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

10. Children

Our service is not directed to children under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. Your continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact and Complaints

For privacy related questions or to exercise your rights please contact our Information Officer at info@pocketproof.co.za.

For complaints you may also contact the Information Regulator of South Africa at inforeg@justice.gov.za.