Privacy Policy
This Privacy Policy explains how Sandav Digital ("we", "us", "our") collects, uses, stores and protects your personal information when you use the Sa-Invoice application and related services (the "Service"). We are committed to protecting your privacy and complying with the Protection of Personal Information Act, 2013 (POPIA) of South Africa.
1. Information we collect
We collect the following categories of personal information:
- Account information — business name, email address and password (stored only as a secure one-way hash).
- Business data you enter — invoices, estimates, clients, products, expenses, banking details and related records you create in the Service.
- Technical information — limited log data such as your IP address and activity timestamps, used for security and to keep your session active.
2. How we use your information
We process your personal information to:
- Create and manage your account and authenticate you;
- Provide the invoicing and estimate features of the Service;
- Send transactional emails such as email verification and password resets;
- Maintain the security and integrity of the Service; and
- Comply with our legal obligations.
3. Lawful basis and consent
We process your information on the basis of your consent (given when you create an account), the performance of our agreement with you, and our legitimate interest in operating and securing the Service. You may withdraw consent at any time by deleting your account, subject to any records we must retain by law.
4. Storage and security
Your data is stored in a secured database. Passwords are never stored in plain text. We use encrypted connections (HTTPS) and access controls to protect your information. Each business account is logically isolated from others. While we take reasonable measures to protect your data, no method of transmission or storage is completely secure.
5. Sharing of information
We do not sell your personal information. We do not share it with third parties except where necessary to operate the Service (for example, our hosting and email providers), or where required by law. Any documents you generate (such as invoices) are shared only by you, at your direction.
6. Your rights under POPIA
You have the right to:
- Access the personal information we hold about you;
- Request correction or deletion of your information;
- Object to processing in certain circumstances;
- Withdraw consent; and
- Lodge a complaint with the Information Regulator (South Africa).
To exercise these rights, contact us using the details below. You may also delete your account directly from within the Service, which removes your data from our active database.
7. Data retention
We retain your information for as long as your account is active. When you delete your account, your data is removed from our active systems, except for any limited records we are legally required to keep.
8. Cookies and local storage
We use a strictly necessary session cookie to keep you signed in, and limited browser local storage to remember preferences and drafts. We do not use advertising or third-party tracking cookies.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes constitutes acceptance of the revised policy.
10. Contact us
For any privacy questions or to exercise your rights, contact our Information Officer:
- Sandav Digital
- Email: support@sandavdigital.co.za
- Website: www.sandavdigital.co.za