Privacy Policy

Last updated: 10 June 2026

TracKeee ("we", "us", "our") is operated by Carolina Maria Vorster. This Privacy Policy explains how we collect, use, and protect your personal information in compliance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African legislation.

1. Information Officer

Name: Carolina Maria Vorster
Email: rolina@rolinavorster.com
Address: Weltevreden Park, Roodepoort, South Africa

2. What Information We Collect

We collect the following personal information when you use TracKeee:

• Account information: email address and password when you register
• Business profile: business name, contact name, phone number, address, VAT number, logo, and banking details
• Client data: client names, contact details, email addresses, phone numbers, VAT numbers, and addresses that you enter
• Project and time data: project names, descriptions, hourly rates, time entries, and invoices that you create
• Payment information: Yoco API keys that you provide for payment processing (actual card payments are handled by Yoco and we do not store card details)

3. Purpose of Processing

We process your personal information for the following purposes:

• To provide and maintain the TracKeee service
• To authenticate your identity and manage your account
• To send transactional emails (account confirmation, password reset)
• To generate invoices and process payments on your behalf
• To improve the service and fix technical issues

4. Legal Basis for Processing

Under POPIA, we process your information based on:

• Consent: you provide consent when you register and use the service
• Contract: processing is necessary to provide the service you requested
• Legitimate interest: to maintain security and improve the service

5. Data Storage and Security

Your data is stored on Microsoft Azure servers (South Africa North region). We implement appropriate technical and organisational measures to protect your personal information, including:

• Encrypted connections (HTTPS/TLS)
• Secure password hashing
• Azure SQL Database with firewall protection
• Multi-tenant data isolation (users can only access their own data)

6. Third-Party Services

We use the following third-party services that may process your data:

• Microsoft Azure: hosting and database services (South Africa North region)
• Brevo: transactional email delivery (account confirmation emails)
• Yoco: payment processing (only when you configure payment integration)

7. Data Retention

We retain your personal information for as long as your account is active. If you request account deletion, we will remove your data within 30 days, except where retention is required by law.

8. Your Rights Under POPIA

You have the right to:

• Access your personal information that we hold
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to the processing of your personal information
• Withdraw your consent at any time
• Lodge a complaint with the Information Regulator

To exercise any of these rights, contact us at rolina@rolinavorster.com.

9. Information Regulator

If you are unsatisfied with how we handle your personal information, you may lodge a complaint with:

The Information Regulator (South Africa)
Email: inforegs@justice.gov.za
Website: inforegulator.org.za

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

11. Contact Us

For any questions about this Privacy Policy or your personal information, contact:

Carolina Maria Vorster
rolina@rolinavorster.com
Weltevreden Park, Roodepoort, South Africa