Privacy policy

How [Registered company name] (Pty) Ltd handles personal information, in line with the Protection of Personal Information Act (POPIA).

1. Two kinds of information

• Your account information: names and email addresses of people who sign in to AgriDesk, and your business details. For this we are the responsible party.
• Your employees' information: the payroll records you capture (names, ID numbers, tax numbers, pay, leave and bank details). For this your business is the responsible party and we are your operator, processing it only on your instructions under the data processing agreement.

2. What we use account information for

• to let you sign in and keep your account secure;
• to send you service emails, such as invitations, sign-in links and password resets;
• to bill you and to meet our own legal and tax obligations.

We do not sell personal information and do not use it for advertising. We do not send payroll data to analytics services.

3. Where information is stored

AgriDesk's database and file storage are hosted in Zurich, Switzerland, and its application servers in Frankfurt, Germany. Switzerland and the European Union have data protection laws that give at least the level of protection POPIA requires, and our service providers are bound by written data processing agreements. This is how we meet section 72 of POPIA for transfers outside South Africa.

4. Service providers

• Supabase: database, sign-in and file storage (Zurich, Switzerland).
• Vercel: application hosting (Frankfurt, Germany) and content delivery.
• Google: only if you choose to connect Google Drive for exports.

5. How we protect it

Information is encrypted in transit and at rest. Access inside each business is limited by role and by employee category, and every table is protected by row-level security so one business can never see another's data. Our staff access customer data only when needed to support you.

6. How long we keep it

We keep account information while your account is open. Payroll records are kept for as long as you keep them in AgriDesk; employers generally have to keep payroll records for at least five years under tax and labour law. When you close your account we delete or anonymise data as set out in the data processing agreement.

7. Your rights

You may ask to see, correct or delete personal information we hold about you, object to processing, or complain to the Information Regulator (inforegulator.org.za). Employees who want access to their payroll records should contact their employer, who controls that information.

8. Contact

Information Officer: [Information Officer name], [privacy email address], [Registered address].