This Privacy Policy explains how IDEAI (Pty) Ltd trading as Faktuur ("Faktuur", "IDEAI", "we", "us" or "our") collects, uses, shares and protects personal information when you visit faktuur.co.za, sign in to the Faktuur web or mobile app, or use the Service. We are committed to processing personal information lawfully and transparently in line with South Africa's Protection of Personal Information Act, 2013 (POPIA).
IDEAI (Pty) Ltd is a software company registered in South Africa (registration number 2026/390992/07), with its registered address at 28 Omega Road, Rozendal, Stellenbosch, Western Cape, 7600.
For any privacy matter, our Information Officer can be reached at hello@faktuur.co.za.
Because Faktuur is a tool merchants use to invoice their own customers, we process personal information in two distinct roles:
To build invoices, quotes and proposals, Faktuur stores the customer information you enter: name, email address, phone, billing address, VAT number, project briefs and uploaded photos, and the line items and amounts of each invoice. We process this information solely to provide the Service to you. You are responsible for ensuring you have a lawful basis (under POPIA or any other applicable law) to provide it to us, and that your own privacy notice tells your customers about it.
We process personal information to:
Our lawful bases under POPIA are your consent, the performance of our contract with you, our legitimate business interests, and compliance with the law.
When you ask Faktuur to generate a project plan, refine a brief, suggest a product listing or extract details from a KYC document, we send the relevant input — including the brief text, attached photos or documents — to Anthropic (Claude) for processing. Anthropic processes this data under their commercial terms; they do not use it to train any model. The AI's output is returned to Faktuur and stored on your project, listing or business record.
All payments — both your subscription to Faktuur and any invoice your customer pays you — are processed by Paystack, a PCI-DSS compliant payment provider. Card details are entered and handled directly by Paystack on their secure systems; Faktuur never sees or stores full card numbers, CVVs or PINs. We receive only the information needed to confirm and reconcile each payment (such as a transaction reference and outcome). Paystack's handling of your data is governed by their own privacy policy at paystack.com/privacy.
We do not use advertising or third-party tracking cookies. The only data we keep in your browser is the theme/language preference and the cart token described above. Some essential cookies may be set by our hosting or security providers to deliver the Service safely.
We do not sell personal information. To run the Service we share it only with the following trusted providers, and only as far as needed:
These providers are bound to protect your information and may only use it to provide their service to us. We may also disclose information where required by law.
Some of our subprocessors (Anthropic, Resend, DigitalOcean, Twilio, Google, Paystack) operate from or process data outside South Africa, including in the United States and the European Union. Where personal information is transferred across borders we take reasonable steps to ensure it remains protected to a standard consistent with POPIA, including by relying on the provider's published safeguards and data-processing addenda.
We keep personal information only for as long as necessary for the purposes set out above, or as required by law (for example, tax and accounting records must be kept for several years). When you delete your account we delete or anonymise the related personal information, except where the law requires us to keep certain records.
We apply reasonable technical and organisational measures — including encryption in transit, isolation per business, access controls and trusted, security-conscious providers — to guard against loss, misuse and unauthorised access. No method of transmission or storage is ever completely secure, but we work to protect your information and to address any incident promptly.
Under POPIA, you have the right to:
If you are your customer trying to exercise these rights about information that a Faktuur merchant uploaded, please contact that merchant first — Faktuur is the operator and the merchant is the responsible party. You may also email us and we will forward your request.
To exercise any rights with respect to information we hold about you as a merchant, email hello@faktuur.co.za. You may also contact the Information Regulator (South Africa) at inforegulator.org.za.
Faktuur is intended for business use and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, please contact us and we will delete it.
We may update this Privacy Policy from time to time. The latest version will always be posted on this page with a revised effective date. Significant changes will be highlighted where appropriate.
Questions about this policy or how we handle your information? Email us at hello@faktuur.co.za.