Privacy Policy

Last updated: 1 July 2026

1. Introduction

InnoVisions ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our platform.

We comply with the Protection of Personal Information Act (POPIA) of South Africa and, where applicable, the General Data Protection Regulation (GDPR) of the European Union.

2. Information We Collect

2.1 Information you provide:

  • Account registration details (name, email address, company name, phone number)
  • Billing and payment information (processed securely by third-party payment processors)
  • Business data you enter into the platform (customer records, financial data, inventory, etc.)
  • Communications with our support team

2.2 Information collected automatically:

  • Log data (IP address, browser type, operating system, referring URLs)
  • Usage data (features used, session duration, pages viewed)
  • Device information (device type, screen resolution)

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the InnoVisions platform
  • Process transactions and send billing notifications
  • Respond to your support requests and inquiries
  • Send service-related communications (updates, security notices)
  • Detect, prevent, and address fraud, security issues, and technical problems
  • Comply with legal obligations

4. Data Protection

We implement appropriate technical and organisational measures to protect your personal information, including:

  • A separate database for each company's data
  • Role-based access control with named permissions
  • Passwords stored only as one-way (bcrypt) hashes, and login attempts limited per IP address
  • An audit trail of every change made through the system
  • Encrypted connections (HTTPS) and regular backups on the hosting we operate
  • Employee access controls and confidentiality agreements

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Upon account termination, we will delete or anonymise your personal information within 90 days, unless we are required to retain it for legal compliance (e.g., tax records which are retained for 5 years as required by South African law).

6. Your Rights

Under POPIA, you have the right to:

  • Request access to the personal information we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data (subject to legal retention requirements)
  • Object to the processing of your personal information
  • Withdraw consent at any time where processing is based on consent
  • Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact InnoVisions using the contact details in your agreement with us.

7. Third-Party Services

We may use third-party services for payment processing, email delivery, and infrastructure hosting. These providers are contractually obligated to protect your data and may only process it in accordance with our instructions. We do not sell your personal information to third parties.

8. Cookies

We use essential cookies for authentication and platform functionality. Analytics cookies are used only with your consent. You can control cookie preferences through your browser settings.

9. International Transfers

Your data is stored where the system is hosted. If the optional AI assistant is switched on, the questions asked and the related data are sent to the AI service provider (OpenAI, United States). Where data is transferred across borders, we ensure appropriate safeguards are in place, as required by POPIA.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the platform. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, use the contact details in your agreement with us.

InnoVisions
South Africa