Privacy Policy

1. Who we are

InvoiceMeNow is a cloud-based invoicing platform operated by Maritz van Heerden, trading at invoicemenow.co.za. We provide invoicing tools for South African service professionals including tutors, coaches, therapists, and consultants.

For any privacy-related queries, contact us at hello@invoicemenow.co.za.

2. What data we collect

We collect only the information needed to provide our service:

• •Account information: your name and email address when you register.
• •Business details: business name, address, VAT number, banking details, and payment terms that you enter into your profile.
• •Invoice data: line items, amounts, dates, and client details on invoices you create.
• •Logo uploads: business logos you upload are stored and rendered on your invoices.
• •Usage data: invoice count and account activity to enforce tier limits and improve the service.

3. Why we collect it

• •To provide the invoicing service and generate PDF invoices on your behalf.
• •To send confirmation emails and payment reminders via Resend.
• •To process subscription payments via PayFast.
• •To comply with South African tax record-keeping requirements.
• •To maintain account security and prevent fraud.

4. How we store it

All data is stored on Supabase (PostgreSQL), hosted in the EU Frankfurt (eu-central-1) region. This region was chosen to ensure adequate data protection standards compatible with South African POPIA requirements. Access to your data is protected by row-level security — only you can read or modify your own records.

Uploaded logos are stored in Supabase Storage with secure, authenticated access URLs. All data in transit is encrypted via HTTPS/TLS.

5. Service providers ("operators")

We share data only with the third-party services necessary to operate the platform. Each provider protects data under GDPR-grade agreements:

We never share your, or your clients', personal information with third parties for marketing purposes.

5a. Cross-border transfers

Some of the providers listed above process data outside South Africa (for example, Supabase is hosted in Frankfurt, Germany). These transfers are made under protections at least equivalent to POPIA — principally GDPR, which sets comprehensive data protection standards across the EU and European Economic Area.

6. Your rights under POPIA

Under the Protection of Personal Information Act (POPIA), you have the right to:

• •Access the personal information we hold about you.
• •Correct any inaccurate or incomplete personal information.
• •Delete your personal information (subject to retention requirements below).
• •Object to the processing of your personal information.
• •Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, email us at hello@invoicemenow.co.za. We will respond within 30 days.

7. Cookies

We use essential cookies only. These cookies are strictly necessary to maintain your authentication session and cannot be disabled without preventing you from using the platform. We do not use tracking, advertising, or analytics cookies.

8. Data retention

Account data exists while your account does — deleting your account permanently removes your profile, client records, and invoice data from our systems. We retain payment and transaction records as required by law (5 years, per SARS record-keeping requirements). If you intend to delete your account, download your invoices first — deletion is permanent and we keep no copy.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of InvoiceMeNow after changes constitutes acceptance of the updated policy.