Privacy Policy

Last updated: January 15, 2024

1. Introduction

SkyBooks ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our invoicing software and services.

This policy complies with the Protection of Personal Information Act (POPIA) of South Africa and the General Data Protection Regulation (GDPR) where applicable.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

  • Name and contact details (email address, phone number)
  • Company information (business name, address, registration number)
  • Billing and payment information
  • Account credentials and preferences
  • Communication records and support interactions

2.2 Business Data

As an invoicing platform, we process business data including:

  • Client information and contact details
  • Invoice and payment records
  • Financial transactions and accounting data
  • Business documents and templates

2.3 Technical Information

We automatically collect technical information when you use our services:

  • IP address and device information
  • Browser type and version
  • Operating system and platform
  • Usage patterns and analytics data
  • Cookies and similar tracking technologies

3. How We Use Your Information

We use your information for the following purposes:

  • Service Provision: To provide and maintain our invoicing services
  • Account Management: To create and manage your account
  • Communication: To send important updates, support messages, and marketing communications (with your consent)
  • Payment Processing: To process payments and manage billing
  • Support: To provide customer support and technical assistance
  • Improvement: To improve our services and develop new features
  • Security: To protect against fraud and ensure platform security
  • Compliance: To comply with legal obligations and regulations

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

  • Contract Performance: To fulfill our contractual obligations to you
  • Legitimate Interest: To provide and improve our services
  • Consent: For marketing communications and optional features
  • Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in:

  • Payment processing and billing
  • Cloud hosting and infrastructure
  • Customer support and communication
  • Analytics and performance monitoring

5.2 Legal Requirements

We may disclose your information when required by law, including:

  • Compliance with court orders or legal proceedings
  • Protection of our rights and property
  • Prevention of fraud or security threats
  • Compliance with tax and regulatory requirements

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

6. Data Security

We implement appropriate technical and organizational measures to protect your information:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication measures
  • Employee training on data protection
  • Incident response and breach notification procedures

7. Data Retention

We retain your information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations
  • Resolve disputes and enforce agreements
  • Maintain business records

When you close your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

8. Your Rights

Under POPIA and GDPR, you have the following rights:

  • Access: Request a copy of your personal information
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your personal information
  • Portability: Request transfer of your data to another service
  • Restriction: Request limitation of processing
  • Objection: Object to processing based on legitimate interests
  • Withdrawal: Withdraw consent for processing

To exercise these rights, please contact us using the information provided below.

9. Cookies and Tracking

We use cookies and similar technologies to:

  • Remember your preferences and settings
  • Analyze website usage and performance
  • Provide personalized content and features
  • Ensure security and prevent fraud

You can control cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of our services.

10. International Transfers

Your information may be transferred to and processed in countries other than South Africa. We ensure appropriate safeguards are in place for such transfers, including:

  • Standard contractual clauses
  • Adequacy decisions
  • Other appropriate safeguards

11. Children's Privacy

Our services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected such information, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Sending email notifications to registered users
  • Displaying prominent notices in our application

Your continued use of our services after such changes constitutes acceptance of the updated policy.

13. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@skybooks.co.za
Phone: +27 (0) 11 123 4567
Address:
SkyBooks (Pty) Ltd
Johannesburg, South Africa
Information Regulator:
For POPIA-related complaints, you may also contact the Information Regulator of South Africa.