Privacy Policy

This policy explains what personal information Nudge collects, why we collect it, how we look after it, and the rights you have over it. It is written to comply with the Protection of Personal Information Act, 2013 (“POPIA”) of South Africa. By using Nudge you agree to this policy.

Who we are

Nudge is an online invoicing service available at usenudge.co.za. For the purposes of POPIA, the responsible party is Kane Liam Lucas, based in South Africa.

Our Information Officer can be reached at kane.buildsapps@gmail.com for any question about this policy or your personal information.

The information we collect

We only collect what the service needs to work:

• Account details — your name, email address and a securely hashed password when you sign up.
• Your business profile — the details you choose to put on your invoices, which may include your business name, contact details, address, tax or registration numbers, and your banking details so clients can pay you.
• Your clients and invoices — the client names, contacts, email addresses, addresses and invoice line items you enter. You are responsible for having a lawful basis to give us your clients’ details (see “Your clients’ information” below).
• Technical and usage data — basic, mostly anonymous information such as pages visited and general device or browser type, used to keep the service running and to understand how it is used. We do not use advertising trackers.

How we use it

• To create and run your account and let you sign in.
• To generate your invoices and PDFs, and to keep track of what is paid and outstanding.
• To detect overdue invoices and draft follow-up messages for you.
• To send you essential service emails, such as confirming your email address or resetting your password.
• To keep the service secure, diagnose problems and improve how it works.
• To meet legal and record-keeping obligations.

We do not sell your personal information, and we do not share it for anyone else’s marketing.

Your clients’ information

When you add clients and issue invoices, you are the responsible party for that information and Nudge acts as your operator (processor), handling it only on your instructions to provide the service to you. You are responsible for ensuring you are entitled to enter your clients’ details and to invoice them.

Who we share it with

We use a small number of trusted service providers who process data on our behalf under confidentiality and data-protection obligations:

• Supabase — database, authentication and secure storage of your data.
• Vercel — application hosting and content delivery.
• Email delivery providers — to send essential account emails.

We may also disclose information if the law requires it, or to protect our rights, safety or property.

Where your data is stored

Your data is stored on secure servers hosted in the European Union, and parts of the service are delivered through a global content-delivery network. This means your personal information may be processed outside South Africa. Where that happens, we rely on providers who offer a level of protection consistent with POPIA’s requirements for cross-border transfers.

How we protect it

All data is transmitted over encrypted connections. Access to your invoices, clients and rates is restricted at the database level so that each account can only ever read its own data. Passwords are stored hashed, never in plain text. No system is perfectly secure, but we take reasonable technical and organisational measures to safeguard your information.

How long we keep it

We keep your information for as long as your account is active. If you close your account, we delete or anonymise your personal information within a reasonable period, except where we are required to keep certain records to comply with the law.

Your rights under POPIA

You have the right to:

• Ask what personal information we hold about you and request a copy of it.
• Ask us to correct or update information that is wrong or out of date.
• Ask us to delete your account and the personal information in it.
• Object to certain processing of your information.
• Withdraw any consent you have given, without affecting processing already done.

To exercise any of these, email kane.buildsapps@gmail.com. You also have the right to complain to the Information Regulator:

• Website: inforegulator.org.za
• Complaints: POPIAComplaints@inforegulator.org.za
• General enquiries: enquiries@inforegulator.org.za

Cookies

We use only the cookies needed to keep you signed in and to keep the service secure. We do not use advertising or third-party tracking cookies.

Changes to this policy

We may update this policy from time to time. When we make a material change, we will update the date at the top of this page and, where appropriate, let you know.

Contact

Questions about this policy or your data? Email kane.buildsapps@gmail.com.