Privacy Policy

1. Who we are

InvoiceMeNow is a cloud-based invoicing platform operated by Maritz van Heerden, trading at invoicemenow.co.za. We provide invoicing tools for South African service professionals including tutors, coaches, therapists, and consultants.

For any privacy-related queries, contact us at hello@invoicemenow.co.za.

2. What data we collect

We collect only the information needed to provide our service:

• •Account information: your name and email address when you register.
• •Business details: business name, address, VAT number, banking details, and payment terms that you enter into your profile.
• •Invoice data: line items, amounts, dates, and client details on invoices you create.
• •Logo uploads: business logos you upload are stored and rendered on your invoices.
• •Usage data: invoice count and account activity to enforce tier limits and improve the service.

3. Why we collect it

• •To provide the invoicing service and generate PDF invoices on your behalf.
• •To send confirmation emails and payment reminders via Resend.
• •To process subscription payments via PayFast.
• •To comply with South African tax record-keeping requirements.
• •To maintain account security and prevent fraud.

4. How we store it

All data is stored on Supabase (PostgreSQL), hosted in the EU Frankfurt (eu-central-1) region. This region was chosen to ensure adequate data protection standards compatible with South African POPIA requirements. Access to your data is protected by row-level security — only you can read or modify your own records.

Uploaded logos are stored in Supabase Storage with secure, authenticated access URLs. All data in transit is encrypted via HTTPS/TLS.

5. Service providers ("operators")

We share data only with the third-party services necessary to operate the platform. Each provider protects data under GDPR-grade agreements:

We never sell your information, and we never share your account, invoice or client data with third parties for marketing purposes. Website visitor data may be shared with Meta for advertising measurement, but only if you accept cookies — see the Cookies and analytics section below.

5a. Cross-border transfers

Some of the providers listed above process data outside South Africa (for example, Supabase is hosted in Frankfurt, Germany). These transfers are made under protections at least equivalent to POPIA — principally GDPR, which sets comprehensive data protection standards across the EU and European Economic Area.

6. Your rights under POPIA

Under the Protection of Personal Information Act (POPIA), you have the right to:

• •Access the personal information we hold about you.
• •Correct any inaccurate or incomplete personal information.
• •Delete your personal information (subject to retention requirements below).
• •Object to the processing of your personal information.
• •Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, email us at hello@invoicemenow.co.za. We will respond within 30 days.

7. Cookies and analytics

Essential cookies are always active. They maintain your authentication session and cannot be disabled without preventing you from using the platform.

Vercel Analytics is loaded on every page. It is cookieless and collects no personal information — it measures aggregate page views only and does not track individual visitors.

If you accept cookies, Meta (Facebook) advertising cookies are also loaded. These are used solely to measure how our ads perform — for example, whether a visitor who clicked a Facebook ad later signed up. No personal invoice or client data is shared with Meta.

If you decline, Meta cookies are not loaded and no advertising measurement takes place.

You can change your choice at any time using the Cookie preferences link in the footer of this page.

8. Data retention

Account data exists while your account does — deleting your account permanently removes your profile, client records, and invoice data from our systems. We retain payment and transaction records as required by law (5 years, per SARS record-keeping requirements). If you intend to delete your account, download your invoices first — deletion is permanent and we keep no copy.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of InvoiceMeNow after changes constitutes acceptance of the updated policy.