Privacy Policy

Vulafy ("we", "us", "our") provides order, customer, and payment tracking tools for small businesses in South Africa. This Privacy Policy explains what information we collect, why we collect it, and how we protect it.

1. Information We Collect

We collect the following categories of information:

• Account information: your name, email address, and password when you register.
• Business information: your business name, contact details, logo, and branding preferences.
• Customer and order data you enter: names, phone numbers, addresses, and order details belonging to your own customers.
• Payment and subscription information, processed through our payment partner, PayFast.
• Usage data, such as which features you use and when you log in, to help us improve Vulafy.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Vulafy platform.
• Process your subscription payments and send billing notifications.
• Send you service updates, such as trial reminders and account notifications.
• Generate WhatsApp invoice links on your behalf, using details you provide.
• Detect, prevent, and address technical issues, fraud, or abuse.

3. POPIA Compliance

Vulafy is built for South African businesses, and we handle personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA). We only collect information that is necessary for the purposes described in this policy, and we do not sell your data or your customers' data to third parties.

4. Sharing Your Information

We share information only where necessary to operate the service:

• With PayFast, to process subscription payments securely.
• With our hosting infrastructure providers, to store and run the application.
• When you choose to send a WhatsApp invoice, the message is delivered directly through WhatsApp to the recipient you specify.
• When required by law, or to protect the rights, safety, and property of Vulafy or our users.

5. Data Security

We use industry-standard measures — including encrypted connections, hashed passwords, and access controls — to protect your information. No method of storage or transmission is completely secure, but we work to continually improve how we safeguard your data.

6. Data Retention

We retain your account and business data for as long as your account is active. If you cancel your subscription, your data is retained for a reasonable period in case you wish to reactivate, after which it may be permanently deleted.

7. Your Rights

Under POPIA, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your account and associated personal information.
• Object to certain uses of your information.

To exercise any of these rights, contact us using the details below.

8. Cookies

We use essential cookies to keep you signed in and to remember your session. We do not use cookies for third-party advertising.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Vulafy dashboard.

10. Contact Us

If you have questions about this Privacy Policy or your personal information, contact us at support@vulafy.co.za.