Privacy Policy

Kalumo, a sole proprietorship operating in South Africa, is the responsible party for personal information processed through www.kalumo.co.za. For anything privacy-related, contact support@kalumo.co.za.

• Account information: your name, email address, password (stored hashed, never in plain text) and business details you add, such as your business name and logo.
• Your customers' information: names, email addresses, phone numbers and billing details you enter in order to invoice them. You are responsible for having a lawful basis to share this with us; we process it only to provide the service.
• Billing information: your subscription plan and payment history. Card details are collected and stored by Paystack, our payment processor; we never see or store your full card number.
• Usage and technical data: logs, device and browser information, and error reports used to keep the service secure and working.

• to provide the service: creating and sending invoices, quotes, reminders and statements, and running your customer portal;
• to process subscription payments and manage your plan;
• to send service emails (invoices you trigger, payment receipts, account notices);
• to secure, debug and improve the service;
• to comply with legal obligations.

We do not sell personal information, and we do not use your data or your customers' data for third-party advertising.

We use a small number of service providers (operators, in POPIA terms) to run Kalumo. Each processes data only on our instructions:

• Paystack: subscription payments;
• Vercel: application hosting;
• Neon: database hosting;
• Resend: sending email;
• Cloudflare: file storage (for example, logos and PDFs);
• Sentry: error monitoring.

Some of these providers store data outside South Africa. Where that happens, we only use providers that protect it to a standard consistent with POPIA.

Kalumo uses essential cookies only, to keep you logged in and to keep the service secure. We do not use advertising or cross-site tracking cookies.

We keep your data for as long as your account is active. If you close your account, we delete your data within a reasonable period, except records we must keep by law (for example, our own tax and billing records). Data is encrypted in transit, and access to production systems is restricted.

Under POPIA you may:

• ask what personal information we hold about you;
• ask us to correct or delete it;
• object to processing, where the law allows;
• complain to the Information Regulator (South Africa) at inforegulator.org.za.

To exercise any of these rights, email support@kalumo.co.za and we will respond within a reasonable time.

If we make material changes to this policy, we will notify you by email or in the app before they take effect. Questions? See our contact page.