1. Personal information we process
We process account details, business profile details, customer contact details, quote and invoice data, billing records, support messages, audit logs, and technical information such as IP addresses and device/browser metadata.
2. Why we process it
We process personal information to provide the service, authenticate users, send account emails, generate business documents, support billing, prevent misuse, troubleshoot errors, and comply with legal obligations.
3. POPIA roles
For your business customer records, your business is usually the responsible party and TradeFlow SA acts as an operator that processes information on your instructions.
For account, billing, security, support, and platform analytics data, TradeFlow SA may act as the responsible party.
4. Service providers
We use service providers for hosting, database storage, email delivery, file storage, payment processing, and messaging integrations. These providers may process information only to help us operate the service.
5. Security
We use access controls, hashed passwords, one-time reset links, audit logging, and operational monitoring to protect personal information. No online service can guarantee perfect security.
6. Retention
We keep personal information for as long as needed to provide the service, meet legal or accounting requirements, resolve disputes, maintain security, and support legitimate business records.
7. Your rights
South African users may request access, correction, deletion, or objection to processing where applicable under POPIA. Requests can be sent to privacy@tradeflowsa.co.za.
8. Breach handling
If we become aware of a security compromise affecting personal information, we will assess it and notify affected parties and the Information Regulator where required by law.
9. Contact
Privacy questions can be sent to privacy@tradeflowsa.co.za.