Privacy Policy.

SlipZapper, a company to be formed ("SlipZapper", "we", "us"), operates the SlipZapper expense management platform. We are the responsible party under the Protection of Personal Information Act, 2013 ("POPIA") and the controller for the purposes of the EU / UK General Data Protection Regulation ("GDPR"), where applicable.

Contact for privacy matters: info@slipzapper.co.za. Physical address: Quality House, 33 St Christopher Road, St Andrews, Bedfordview, South Africa.

• Account information. Name, email address, password, company name, role, and profile details.
• Billing information. Card details are collected and stored by our payment processor (Payfast). We store only a tokenised reference, subscription status, and billing history.
• Expense data. Receipts, invoices, merchant details, amounts, VAT, categories, notes, and any images or files you upload.
• Usage data. Device information, IP address, browser type, pages visited, and actions taken in the Service.
• Communications. Any information you provide when contacting us.

• To provide, maintain, and improve the Service.
• To process transactions and manage your subscription.
• To send transactional communications (billing receipts, trial reminders, security alerts, invitations, and password resets).
• To provide customer support.
• To comply with legal obligations and to prevent fraud.
• To improve accuracy of AI receipt extraction, using de identified data only.

Where the GDPR applies, we rely on the following legal bases:

• Contract. To provide the Service you have subscribed to.
• Legitimate interests. To improve the Service, secure our systems, and prevent fraud.
• Legal obligation. To comply with applicable laws.
• Consent. Where you provide it, for example for optional analytics or marketing cookies.

We share personal information with:

• Sub processors that host and support the Service, including Supabase (database and authentication), Cloudflare (hosting), Payfast (payments), Lovable AI (email delivery and AI receipt scanning), and Google (reCAPTCHA).
• Professional advisors such as auditors and lawyers, where required.
• Regulatory authorities where we are legally required to do so.
• Third parties in connection with a corporate transaction, subject to appropriate confidentiality.

We do not sell your personal information to third parties.

Some of our sub processors are located outside South Africa or the EU / UK. Where such transfers occur, we rely on appropriate safeguards including standard contractual clauses and provider certifications to protect your information.

We retain personal information for as long as your Account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce agreements. Expense records may be retained for the periods required by applicable tax law, generally at least five years in South Africa.

We implement appropriate technical and organisational measures to protect personal information, including encryption in transit and at rest, role based access control, row level security at the database layer, and regular reviews. No system is completely secure, so we cannot guarantee absolute security.

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Request correction or deletion of your personal information.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Information Regulator (South Africa) or your local supervisory authority.

To exercise these rights, contact us at info@slipzapper.co.za. We will respond within the timeframes required by law.

We use strictly necessary cookies to keep you signed in and to secure the Service. With your consent we also use analytics cookies to understand how the Service is used. You can accept, reject, or manage optional cookies from the cookie banner shown on your first visit, and change your preferences at any time by clearing your browser storage.

Categories of cookies we use:

• Strictly necessary. Session, authentication, and security cookies.
• Analytics. Aggregate usage measurement (opt in).
• Marketing. Campaign attribution and personalisation (opt in).

The Service is not directed to children under 18. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the policy reflects the most recent revision. Material changes will be notified via the Service or by email.

For any privacy related questions or requests, contact us at info@slipzapper.co.za.