Privacy Policy

Who is responsible

Invoice Charm is provided by DryDesign, the responsible party for personal information processed through the service. This policy explains what we collect, why, and the rights you have under the Protection of Personal Information Act (POPIA) and other applicable laws.

Information we collect

• Account details: your name, email address and sign-in information.
• Business details: company name, logo, address, tax/VAT number and banking details you add in Settings.
• Client and invoice records: client names, contact details, services, hours, rates and invoice history you enter.
• Subscription information: your plan, status and payment reference. Card and bank payment details are handled by PayFast; we do not store them.
• Technical data: basic logs such as device, browser and error information needed to keep the service secure and working.

Why we use it (legal basis)

• To provide the service you signed up for and manage your subscription (performance of a contract).
• To keep invoicing records accurate and meet tax and record-keeping obligations (legal obligation).
• To secure the service, prevent fraud and fix problems (legitimate interest).
• To send account and service emails, such as sign-in and password messages.

We do not sell your personal information or use it for third-party advertising.

Who we share it with

We share information only with service providers that help us run Invoice Charm — secure cloud hosting and database services, email delivery, and PayFast for payments — and only as needed for those purposes, or where the law requires it.

Your clients' information

When you add client details, you decide what is entered and why. You are responsible for having a lawful basis to share that information with us; we process it only to provide the service to you.

How long we keep it

We keep account information while your account is active. Issued invoices and related records are kept for the duration of your subscription, plus 3 months after your subscription ends, or longer where tax law requires, so that financial records remain complete. When information is no longer needed, we delete or anonymise it.

Security

Data is encrypted in transit, access is restricted so each user can only see their own records, and we use reputable hosting providers. No system is perfectly secure, but we take reasonable steps to protect your information.

Your rights

You may ask to access, correct or delete your personal information, object to certain processing, or request a copy of your data. You can update most details directly in Settings. To make a request, contact DryDesign at info@drydesign.co.za. You may also lodge a complaint with South Africa's Information Regulator.

Changes

We may update this policy and will post the new version here with an updated date.