Privacy Policy

1. Introduction

Fin Eaze operates the FINEAZE platform and is committed to protecting the personal information of its users in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and your rights as a data subject.

2. Information We Collect

We collect the following categories of personal information:

• Account Information: Name, company name, email address, phone number, and industry type provided at registration;
• Business Data: Financial records, sales data, expense records, invoice and quotation data, client information, and bank account details entered by the User;
• Usage Data: Log data, IP addresses, browser type, pages accessed, and interaction data collected automatically when you use the Service;
• Communication Data: Records of communications between you and the Company.

3. Purpose of Processing

We process personal information for the following lawful purposes:

• To provide, maintain, and improve the Service;
• To manage your account and verify your identity;
• To send transactional communications including account approval notifications and billing information;
• To comply with legal and regulatory obligations;
• To detect, prevent, and address technical issues, fraud, and security incidents.

4. Data Storage and Security

User data is stored on Supabase infrastructure, which operates on secure cloud servers. We implement reasonable technical and organisational measures to protect personal information against loss, theft, unauthorised access, disclosure, copying, use, or modification. However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security and disclaim liability for breaches outside our reasonable control.

5. Data Retention

We retain personal information for as long as your account is active or as necessary to provide the Service. Upon account termination, we may retain data for a period required by law or for legitimate business purposes, after which it will be securely deleted or anonymised.

6. Sharing of Information

We do not sell personal information. We may share data with:

• Service Providers: Third-party platforms that assist in operating the Service, including Supabase (data storage), Vercel (hosting), Resend (email delivery), and Groq (AI processing). These providers are contractually obligated to handle data securely;
• Legal Authorities: Where required by law, court order, or government authority;
• Business Transfers: In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction.

7. Your Rights as a Data Subject

Under POPIA, you have the right to:

• Request access to the personal information we hold about you;
• Request correction of inaccurate or incomplete personal information;
• Request deletion of your personal information, subject to legal retention requirements;
• Object to the processing of your personal information;
• Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, contact us at signhubsa@gmail.com.

8. Cookies and Tracking

The Service uses session cookies and authentication tokens to maintain your login state. These are strictly necessary for the operation of the Service. We do not use advertising cookies or third-party tracking technologies.

9. Cross-Border Data Transfers

Your data may be processed outside the Republic of South Africa by our third-party service providers. Where such transfers occur, we take reasonable steps to ensure appropriate safeguards are in place consistent with POPIA requirements.

10. Children

The Service is not directed at persons under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided personal information, we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Continued use of the Service constitutes acceptance of the updated Policy.

12. Contact and Information Regulator

For privacy-related queries or to exercise your data subject rights:

signhubsa@gmail.com · 068 383 1584

To lodge a complaint with the Information Regulator of South Africa: inforeg.org.za