Privacy Policy

1. Information We Collect

Personal Information

We collect personal information that you voluntarily provide to us when you:

• Register for an account and complete user profiles
• Post leads or business opportunities inside the vertical silos
• Submit details for double-entry ledger bookkeeping reconciliation
• Contact us for technical support
• Use our virtual wallet and transaction features

Automatically Collected Information

We automatically collect security logs and usage data when you access the platform:

• IP addresses and geolocation parameters
• Browser fingerprinting details and user agent tokens
• Security logs (WAF triggers and rate limiting counts)
• Audit trails for double-entry bookkeeping actions

2. How We Use Your Information

We process your information in compliance with POPI Act regulations to:

• Provide and maintain virtual wallet services
• Process double-entry ledger allocations securely
• Communicate critical account alerts and WhatsApp notifications
• Detect and mitigate malicious events via our WAF layer
• Maintain compliance with the Income Tax Act (7-year retention)

3. Data Security & Encryption

We implement enterprise-grade security protocols to protect your personal information:

• AES-256 encryption on all sensitive database fields
• Web Application Firewall (WAF) regex inspection on incoming requests
• Real-time IP rate limiting to block DDoS and brute force threats
• Secure cookie states for active identity sessions

4. Sharing with Third Parties

We do not sell your personal information. However, to operate the Platform, we share your data with verified third-party partners in compliance with POPIA:

• Financial and Escrow Partners: Transaction values, names, and account numbers are shared with our licensed escrow providers to secure payment milestones.
• Communication Gateways: Contact numbers and transaction milestones are processed through third-party SMS and WhatsApp API gateways for automated notifications.
• Cloud Hosting Providers: Database and application files are stored on secure cloud servers with active access controls.

5. Cross-Border Data Transfers

Your personal information may be stored or processed outside the borders of the Republic of South Africa. We ensure that any hosting infrastructure or third-party service provider located outside South Africa is bound by binding corporate rules or data transfer agreements that offer an equivalent level of protection as mandated by POPIA.

6. Your Rights under the POPI Act

In terms of Sections 23 and 24 of POPIA, you have the right to:

• Request Access: Confirm whether we hold your personal information and request a copy of the recorded details.
• Request Correction: Request that we correct, update, or complete any inaccurate or misleading information.
• Request Erasure: Object to the processing of your data and request that we delete your personal information, subject to statutory record retention requirements (e.g. tax laws).
• Lodge a Complaint: Lodge a complaint regarding our data practices with the South African Information Regulator at inquiries@inforegulator.org.za.

7. Cookies and Tracking

We use essential cookies to maintain secure user sessions, manage authentication tokens, and verify WAF states. These cookies are temporary, encrypted, and do not track your browsing activity across other websites.