Privacy Policy
Your privacy matters to us. This policy explains how zepipcepit handles your personal information in compliance with South African data protection laws.
Information We Collect
When you use zepipcepit's business budgeting platform, we collect information that helps us provide better services. This includes data you provide directly and information we gather automatically during your interaction with our platform.
Personal Information You Provide
- Contact details including name, email address, and phone number
- Business information such as company name, industry type, and size
- Account credentials and security preferences
- Financial data entered for budgeting purposes
- Communication history and support interactions
Automatically Collected Data
Our system collects technical information to improve platform performance and security. This includes IP addresses, browser types, device identifiers, usage patterns, and session data. We also track how you navigate through our platform to enhance user experience.
How We Use Your Information
Your information serves specific purposes related to our budgeting services. We process data to deliver platform functionality, provide customer support, and ensure security compliance with South African regulations.
Purpose | Data Types Used | Legal Basis |
---|---|---|
Platform Operation | Account details, financial data, usage patterns | Contract performance |
Customer Support | Contact information, communication history | Legitimate interest |
Security Monitoring | IP addresses, device data, access logs | Legal compliance |
Data Protection and Security
We implement comprehensive security measures to protect your information. Our approach combines technical safeguards with operational procedures, ensuring data remains secure throughout its lifecycle on our platform.
All financial data is encrypted using industry-standard AES-256 encryption both in transit and at rest.
Security Measures
- Multi-factor authentication for account access
- Regular security audits and vulnerability assessments
- Secure data centers with 24/7 monitoring
- Employee background checks and confidentiality agreements
- Automated backup systems with encrypted storage
Your Rights and Choices
Under South African data protection laws, you have several rights regarding your personal information. These rights ensure you maintain control over how your data is processed and stored.
Access and Control
You can request access to your personal data, ask for corrections to inaccurate information, or request deletion of your account. To exercise these rights, contact our privacy team using the information provided below. We respond to all requests within 30 days.
- View and download your personal data
- Correct inaccurate or outdated information
- Delete your account and associated data
- Object to certain data processing activities
- Withdraw consent for optional data uses
Data Retention and Deletion
We retain your information only as long as necessary for business purposes or legal requirements. Different types of data have specific retention periods based on their use and regulatory obligations.
Retention Periods
Account information remains active until you request deletion or haven't accessed the platform for 36 months. Financial data used for budgeting is retained for 7 years to comply with South African tax regulations. Communication records are kept for 2 years for quality assurance purposes.
When you delete your account, we remove personal identifiers immediately but may retain anonymized data for statistical analysis. Backup copies are automatically purged within 90 days of account deletion.
Third-Party Services
zepipcepit works with trusted service providers to deliver our platform functionality. These partnerships are governed by strict data processing agreements that ensure your information receives the same level of protection.
Service Categories
- Cloud hosting services for secure data storage and processing
- Payment processors for subscription billing (no financial details stored)
- Email service providers for platform notifications and support
- Analytics tools with anonymized data for platform improvement
- Security monitoring services for threat detection
We never sell your personal information to third parties. Any data sharing occurs only when necessary for service delivery or legal compliance, and always with appropriate safeguards in place.
Updates to This Policy
This privacy policy may be updated periodically to reflect changes in our practices or legal requirements. When significant changes occur, we'll notify you via email and through platform notifications at least 30 days before implementation.
We recommend reviewing this policy every few months to stay informed about how we protect your information.
Contact Our Privacy Team
Our privacy team is available Monday through Friday, 9 AM to 5 PM SAST, to assist with any questions or concerns about your personal information.