Privacy Policy
Last updated: January 15, 2024
1. Introduction
SkyBooks ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our invoicing software and services.
This policy complies with the Protection of Personal Information Act (POPIA) of South Africa and the General Data Protection Regulation (GDPR) where applicable.
2. Information We Collect
2.1 Personal Information
We may collect the following personal information:
- Name and contact details (email address, phone number)
- Company information (business name, address, registration number)
- Billing and payment information
- Account credentials and preferences
- Communication records and support interactions
2.2 Business Data
As an invoicing platform, we process business data including:
- Client information and contact details
- Invoice and payment records
- Financial transactions and accounting data
- Business documents and templates
2.3 Technical Information
We automatically collect technical information when you use our services:
- IP address and device information
- Browser type and version
- Operating system and platform
- Usage patterns and analytics data
- Cookies and similar tracking technologies
3. How We Use Your Information
We use your information for the following purposes:
- Service Provision: To provide and maintain our invoicing services
- Account Management: To create and manage your account
- Communication: To send important updates, support messages, and marketing communications (with your consent)
- Payment Processing: To process payments and manage billing
- Support: To provide customer support and technical assistance
- Improvement: To improve our services and develop new features
- Security: To protect against fraud and ensure platform security
- Compliance: To comply with legal obligations and regulations
4. Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Contract Performance: To fulfill our contractual obligations to you
- Legitimate Interest: To provide and improve our services
- Consent: For marketing communications and optional features
- Legal Obligation: To comply with applicable laws and regulations
5. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
5.1 Service Providers
We may share information with trusted third-party service providers who assist us in:
- Payment processing and billing
- Cloud hosting and infrastructure
- Customer support and communication
- Analytics and performance monitoring
5.2 Legal Requirements
We may disclose your information when required by law, including:
- Compliance with court orders or legal proceedings
- Protection of our rights and property
- Prevention of fraud or security threats
- Compliance with tax and regulatory requirements
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.
6. Data Security
We implement appropriate technical and organizational measures to protect your information:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Employee training on data protection
- Incident response and breach notification procedures
7. Data Retention
We retain your information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Maintain business records
When you close your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.
8. Your Rights
Under POPIA and GDPR, you have the following rights:
- Access: Request a copy of your personal information
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal information
- Portability: Request transfer of your data to another service
- Restriction: Request limitation of processing
- Objection: Object to processing based on legitimate interests
- Withdrawal: Withdraw consent for processing
To exercise these rights, please contact us using the information provided below.
9. Cookies and Tracking
We use cookies and similar technologies to:
- Remember your preferences and settings
- Analyze website usage and performance
- Provide personalized content and features
- Ensure security and prevent fraud
You can control cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of our services.
10. International Transfers
Your information may be transferred to and processed in countries other than South Africa. We ensure appropriate safeguards are in place for such transfers, including:
- Standard contractual clauses
- Adequacy decisions
- Other appropriate safeguards
11. Children's Privacy
Our services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected such information, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending email notifications to registered users
- Displaying prominent notices in our application
Your continued use of our services after such changes constitutes acceptance of the updated policy.
13. Contact Information
If you have any questions about this Privacy Policy or our data practices, please contact us:
SkyBooks (Pty) Ltd
Johannesburg, South Africa
For POPIA-related complaints, you may also contact the Information Regulator of South Africa.