Privacy Policy
Last updated: 10 May 2025
This Privacy Policy explains how 1FinForce collects, uses, stores, and protects your personal information. It has been drafted with reference to the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa and reflects our current approach to data privacy.
1. Who we are
1FinForce is a business operations platform for South African small and medium-sized enterprises, accessible at app.1finforce.com. For the purposes of POPIA, 1FinForce acts as the Responsible Party — the entity that determines the purpose and means of processing your personal information.
Company: 1FinForce
Platform: app.1finforce.com
Email: sales@1finforce.com
Country: South Africa
2. What personal information we collect
We collect only the information necessary to provide our platform and services.
- Full name and email address
- Company name and business details
- Role within your organisation
- Password (stored in encrypted form — we never see your plain-text password)
- Product and inventory records you create
- Customer and supplier contact details you enter into the platform
- Purchase orders, sales orders, and shipment records
- Financial data such as revenue figures and cashflow entries
- IP address and browser type
- Pages visited and features used within the platform
- Session timestamps and login activity
- Device type and operating system
- Billing is processed by Paystack — we do not store card numbers or banking details
- We retain subscription status, plan type, and billing history for account management
- Name, email address, and message submitted via our website contact form
- Business type and current tools (if provided)
3. How we use your information
- Platform access and account management — to create and manage your account and provide access to 1FinForce.
- Service delivery — to operate the platform features you use across inventory, orders, logistics, and cashflow.
- Billing and subscription management — to process payments and send billing communications.
- Customer support — to respond to your queries and assist with onboarding.
- Platform improvement — to understand how the platform is used, using aggregated non-identifiable data where possible.
- Legal compliance — to comply with POPIA and applicable South African law.
- Security — to detect, prevent, and investigate fraud or unauthorised access.
- Communications — service notifications and (where consented) marketing. You may opt out of marketing at any time.
We do not use your personal information for automated decision-making or profiling.
4. Lawful basis for processing
- Contractual necessity — processing required to fulfil our agreement with you when you use the platform.
- Consent — where you have provided consent, such as when accepting our terms or subscribing to communications.
- Legitimate interest — where we have a legitimate business interest that does not override your privacy rights, such as security and fraud prevention.
- Legal obligation — where processing is required to comply with South African law.
6. How long we keep your information
- Active account data — retained for the duration of your subscription.
- Business operational records — retained for your subscription period plus up to 5 years to comply with South African financial record-keeping obligations.
- Billing records — retained for a minimum of 5 years.
- Contact form submissions — retained for up to 12 months.
- Account deletion — personal information removed from active systems within 30 days of a deletion request, subject to legal retention obligations.
7. How we protect your information
- Encryption of data in transit using TLS/HTTPS
- Encryption of data at rest within our database infrastructure
- Row-level security (RLS) ensuring your company data is inaccessible to other companies on the platform
- Secure authentication with hashed password storage
- Access controls limiting internal access on a need-to-know basis
- Ongoing review of infrastructure and third-party service security
In the event of a security compromise affecting your personal information, we will endeavour to notify you as soon as reasonably possible.
8. Your privacy rights
- Right to be informed — you have the right to know we are collecting your information and why.
- Right of access — you may request a copy of the personal information we hold about you.
- Right to correction — you may request correction of inaccurate or incomplete information.
- Right to deletion — you may request deletion of your personal information, subject to legal retention requirements.
- Right to object — you may object to processing of your information, including for direct marketing.
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
- Right to lodge a complaint — you may lodge a complaint with the Information Regulator of South Africa.
To exercise your rights, contact us at sales@1finforce.com. We will respond within 30 days.
9. International transfers
Some service providers are located outside South Africa. Where we transfer personal information internationally, we ensure adequate safeguards are in place. Supabase and Vercel operate under internationally recognised data protection standards and are governed by contractual data processing agreements.
11. Children
1FinForce is intended for use by adults and organisations. We do not knowingly collect personal information from persons under the age of 18. If you believe a child has provided us with personal information, contact us at sales@1finforce.com.
12. Changes to this policy
We may update this policy from time to time. When we make material changes, we will notify you by email or prominent notice within the platform. The date at the top of this page indicates when it was last updated.
13. Contact us
We will respond to all privacy-related requests within 30 days of receipt.
This Privacy Policy is governed by the laws of the Republic of South Africa and has been drafted with reference to POPIA (Act 4 of 2013). It does not constitute legal advice and does not represent a formal certification of compliance.