Privacy Policy
Last updated: 12 August 2026
This policy explains what information Zarbill collects, why, and what rights you have over it. We follow the Protection of Personal Information Act (POPIA).
What we collect
- Account details. Your email address and password (stored encrypted, never in plain text).
- Business details. The business name, address, contact details and bank instructions you enter in Settings.
- Your business records. The clients, services and invoices you create.
- Payment records. If you subscribe, we store your plan, status and renewal date. Card details are handled entirely by Paystack — we never receive them.
Why we collect it
To run the service: to log you in, save your work, put your details on your invoices, and manage your subscription. We do not sell your information and we do not use it for advertising.
Client information you enter
When you add a client, you are entering someone else's details. You are responsible for having a lawful reason to hold that information. We process it only to provide the service to you, and we do not contact your clients.
Who we share it with
We use a small number of service providers, and only for the purposes below:
- Supabase — secure database and authentication hosting.
- Vercel — application hosting.
- Paystack — payment processing for subscriptions.
We may also disclose information if required by law.
Security
Data is encrypted in transit and at rest. Each account is isolated at the database level, so one account can never read another account's records. Access to production systems is restricted.
How long we keep it
We keep your data for as long as your account is open. If you ask us to delete your account, we remove your personal data within 30 days, except where we must keep limited records for legal or tax reasons.
Your rights
- Ask what personal information we hold about you.
- Correct anything inaccurate — most details are editable in Settings.
- Request deletion of your account and data.
- Object to processing, or lodge a complaint with the Information Regulator of South Africa.
To exercise any of these, email support@zarbill.com. We respond within 30 days.
Cookies
We use only the cookies needed to keep you signed in. We do not use advertising or third-party tracking cookies.
Changes
If we make a material change to this policy, we will notify account holders by email before it takes effect.