Privacy Policy
Last updated: 10 October 2026
This Privacy Policy describes how personal information is collected, used, stored, and protected when you use InvoiceTrak (the "Service").
Data controller and seller
The Service is operated by Isizwe Capital (Pty) Ltd, a registered legal entity trading as InvoiceTrak ("we", "us", "our", or the "Seller"). Isizwe Capital (Pty) Ltd t/a InvoiceTrak is the data controller responsible for the personal information described in this policy and determines the purposes and means of its processing.
1. Information we collect
- Account information: name, email address, company name, role, and authentication credentials.
- Delivery data: invoices, customer names and addresses, tracking references, signatures, photos, GPS check-in coordinates, and status history.
- Usage data: plan selections, invoice upload counts, driver/customer additions, and feature usage.
- Billing data: payment provider customer identifiers, subscription status, and transaction history.
2. How we use your information and our legal basis
- To provide, operate, and improve the Service — legal basis: performance of a contract with you.
- To authenticate users, enforce role-based access, and maintain audit logs — legal basis: performance of a contract and our legitimate interest in securing the Service.
- To send delivery notifications, receipts, and account-related emails — legal basis: performance of a contract; consent where the message is marketing.
- To process payments, manage subscriptions, and prevent fraud — legal basis: performance of a contract, legitimate interests, and compliance with legal and tax obligations.
3. Data sharing
We do not sell your personal information. We share data only with the categories of recipients below, and only under confidentiality and security obligations:
- Service providers and subprocessors — cloud hosting, database, file storage, and transactional email providers used to run the Service.
- Paddle.com Market Ltd ("Paddle") — our Merchant of Record. Our order process is conducted by our online reseller Paddle.com. Paddle is the Merchant of Record for all our orders and acts as an independent controller for payment processing. Billing information (such as your name, email address, billing address, tax location, and payment details) is collected and processed by Paddle for the sale of subscriptions, subscription management, payments, invoicing, tax compliance, fraud prevention, and returns. See Paddle's privacy notice.
- Professional advisers — legal, accounting, and audit advisers where necessary.
- Authorities — regulators, courts, or law enforcement where required by law.
Card and payment details are never stored on our systems; they are handled directly by Paddle and its payment partners.
4. Data retention and security
We retain delivery records and proof files for as long as your account is active or as required by law. All data is encrypted in transit and at rest. Access is controlled by strict role-based permissions and row-level security policies.
5. Your rights
You may request access to, correction of, or deletion of your personal information by contacting us. Note that some records must be retained for legal, billing, or audit purposes.
6. Cookies and tracking
We use essential cookies for authentication and session management. We do not use third-party advertising or analytics cookies.
7. Changes to this policy
We may update this Privacy Policy from time to time. We will notify users of material changes via email or through the Service.
8. Contact us
If you have questions about this Privacy Policy, please contact Isizwe Capital (Pty) Ltd t/a InvoiceTrak at support@invoicetrak.co.za.