Privacy Policy

Introduction

At Plorysaleth, we understand that your privacy is fundamental to your trust in our expense tracking platform. This comprehensive privacy policy explains how we collect, use, store, and protect your personal information when you use our services at Plorysaleth.com. We're committed to maintaining the highest standards of data protection while providing you with exceptional financial management tools.

Our approach to privacy isn't just about compliance – it's about respecting your rights and empowering you with control over your personal data. This policy applies to all users of our platform, whether you're tracking personal expenses or managing business finances across South Africa and beyond.

Information We Collect

We collect various types of information to provide and improve our expense tracking services. Here's a detailed breakdown of what we gather and why:

How We Use Your Information

Your information serves specific purposes that directly benefit your experience with Plorysaleth. We've organized our data usage into clear categories to help you understand exactly how your information works for you:

• Service Delivery: Processing your expense data, generating reports, categorizing transactions, and providing personalized insights into your spending patterns.
• Account Management: Creating and maintaining your account, processing payments, sending service notifications, and providing customer support when you need assistance.
• Security & Fraud Prevention: Monitoring for suspicious activities, preventing unauthorized access, and protecting both your account and our platform from potential threats.
• Communication: Sending important updates about your account, new features, security alerts, and occasional promotional content (which you can opt out of at any time).
• Platform Improvement: Analyzing usage patterns to enhance our features, fix bugs, develop new tools, and optimize overall performance based on real user needs.
• Legal Compliance: Meeting regulatory requirements, responding to lawful requests, and maintaining records as required by South African and international financial regulations.

Data Sharing and Third Parties

We maintain strict control over your personal information and only share it in specific, limited circumstances. Here's our complete disclosure of when and why we might share your data:

Service Providers: We work with carefully vetted third-party companies that help us deliver our services, including cloud hosting providers, payment processors, and email service providers. These partners are bound by strict confidentiality agreements and can only use your data for the specific services they provide to us.

Legal Requirements: We may disclose your information when required by law, such as responding to court orders, government requests, or regulatory investigations. We'll notify you of such requests unless legally prohibited from doing so.

Business Transfers: In the unlikely event of a merger, acquisition, or sale of our company, your information might be transferred as part of that transaction. We'll notify you well in advance and ensure the new entity maintains the same privacy standards.

Your Privacy Rights

You have significant control over your personal information. We've designed our systems to make exercising these rights straightforward and accessible:

Data Security Measures

Protecting your financial information is our top priority. We've implemented multiple layers of security to safeguard your data against unauthorized access, theft, and misuse:

• Encryption: All data transmission uses industry-standard TLS encryption, and sensitive data is encrypted at rest using AES-256 encryption standards.
• Access Controls: Strict employee access controls ensure only authorized personnel can access your information, and all access is logged and monitored.
• Regular Security Audits: We conduct quarterly security assessments and penetration testing to identify and address potential vulnerabilities.
• Secure Infrastructure: Our servers are hosted in secure data centers with physical security measures, redundant systems, and 24/7 monitoring.
• Incident Response: We maintain a comprehensive incident response plan to quickly address any security breaches and notify affected users within 72 hours.
• Two-Factor Authentication: Optional 2FA provides an additional security layer for your account access and sensitive operations.

Data Retention and Deletion

We retain your personal information only as long as necessary to provide our services and meet legal obligations. Our retention policies are designed to balance your privacy rights with practical and legal requirements:

Active Account Data: While your account remains active, we retain your expense data and account information to provide ongoing services and support your financial tracking needs.

Closed Account Data: After account closure, we retain essential information for 7 years to comply with South African financial record-keeping requirements, then securely delete all personal information.

Marketing Data: If you've opted out of marketing communications, we immediately stop using your information for promotional purposes but may retain it to honor your opt-out preferences.

Technical Logs: System logs and technical data are automatically deleted after 12 months unless required for ongoing security investigations or legal compliance.

International Data Transfers

As a South African company, we primarily store and process your data within South Africa. However, some of our service providers may process data internationally. When this occurs, we ensure appropriate safeguards are in place:

• All international transfers comply with South African data protection laws and international standards
• We use approved transfer mechanisms such as Standard Contractual Clauses or adequacy decisions
• Service providers must demonstrate equivalent levels of data protection to South African standards
• We maintain oversight of all international data processing activities through regular audits and compliance checks

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our platform. Here's what we use and why:

• Essential Cookies: Required for basic platform functionality, including login sessions and security features
• Performance Cookies: Help us understand how you use our platform to improve performance and fix issues
• Functional Cookies: Remember your preferences and settings to provide a personalized experience
• Analytics Cookies: Provide insights into user behavior to help us improve our services (you can opt out of these)

You can control cookie settings through your browser preferences, though disabling essential cookies may limit platform functionality.

Children's Privacy

Plorysaleth is designed for adults managing their financial responsibilities. We don't knowingly collect personal information from children under 18 years of age. If we discover that we've inadvertently collected information from a minor, we'll promptly delete it and, where possible, notify the parents or guardians.

If you're a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can address the situation appropriately.

Changes to This Privacy Policy

We may update this privacy policy periodically to reflect changes in our practices, legal requirements, or service offerings. When we make significant changes, we'll notify you through multiple channels:

• Email notification to your registered account address
• Prominent notice on our platform dashboard
• Updated "last modified" date at the top of this policy
• For major changes, we may require you to acknowledge the updates before continuing to use our services

We encourage you to review this policy regularly to stay informed about how we protect your information.