This Privacy Policy explains how Illumi ("we", "us", "our") collects, uses, shares and protects personal information. It is intended to align with South African privacy principles, including the Protection of Personal Information Act (POPIA).
1. Who we are
Illumi is a web-based invoicing platform for South African businesses.
2. Information we collect
We may collect:
- Account details (name, email address, login credentials).
- Workspace/business information (company name, address, VAT number, registration details where provided).
- Client/customer details you add (e.g. contact person, email, billing address).
- Invoice and payment-related metadata (invoice numbers, amounts, due dates, status).
- Usage data (device/browser info, logs, and analytics events).
3. How we use information
We use information to:
- Provide and improve the service (creating invoices, sending emails, showing payment status).
- Secure accounts and prevent fraud/abuse.
- Provide support and respond to requests.
- Process subscription billing and manage access to paid features.
4. Legal basis / justification
We process personal information for legitimate business purposes, to perform our contract with you (providing the service), to comply with legal obligations where applicable, and with consent where required.
5. Sharing and third parties
We may share information with service providers that help us operate Illumi, such as:
- Infrastructure and hosting providers.
- Email delivery providers for sending invoice and verification emails.
- Payment providers you choose to connect via PayGate (payment details are handled by the provider).
- Analytics tools used to understand usage and improve performance.
We do not sell personal information.
6. Data retention
We retain personal information for as long as necessary to provide the service, meet legal/accounting obligations, resolve disputes, and enforce agreements. You may request deletion, subject to legitimate retention requirements.
7. Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No system is perfectly secure; you use the service at your own risk.
8. Your rights
Subject to applicable law, you may request:
- Access to personal information we hold about you.
- Correction of inaccurate information.
- Deletion, objection, or restriction of processing in certain cases.
9. Cross-border transfers
Some service providers may store or process data outside South Africa. Where this happens, we take reasonable steps to ensure appropriate protections are in place.
10. Contact
For privacy questions or requests, contact us at info@illumi.co.za.
This document is provided as a general policy template and should be reviewed by a qualified professional for your specific business.