Privacy Policy

Zakr ("we", "us") helps South African trades create and send quotes and invoices. This policy explains what personal information we collect, why, how we protect it, and your rights under the Protection of Personal Information Act, 2013 (POPIA).

1. Who is responsible for your information

Zakr is the responsible party. Our Information Officer can be reached at privacy@zakr.co.za. You may also lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za.

2. What we collect and why

From you (the tradesperson): your email address and password (to create and secure your account); your business name, trade, phone number and address (to brand your documents); your VAT number (if you are VAT registered); and your banking details (only if you choose to show EFT details on invoices or connect online payments). We use this solely to run your account and produce your documents.

About your customers (entered by you):their name, and optionally their phone number, email and address, so your quotes and invoices can be addressed and delivered. You are responsible for having a lawful basis to enter your customers' details.

On documents: line items, amounts, job photos you upload, and the electronic signature a customer draws when approving a quote. Signatures and photos are used only to record approval and job detail on that document.

3. We do not sell your data

We never sell or rent your personal information, and we do not use it for advertising. We only use it to provide the service described here.

4. Who processes your data on our behalf

We use trusted service providers to run Zakr. Your account data and documents are stored and hosted in the European Union (Frankfurt, Germany). The EU's data-protection law (the GDPR) provides protection substantially similar to POPIA, which is the basis for this cross-border processing under section 72 of POPIA; for other providers we rely on their contractual data-protection commitments.

• Supabase — database, login and file storage (EU region, Frankfurt).
• Vercel — website hosting (EU region, Frankfurt).
• Paystack — online card/EFT payments, when you enable payment collection.
• PayFast — billing for Zakr Pro subscriptions (South Africa).
• Resend — sending you notification emails.
• Sentry — error monitoring, to help us fix bugs.

5. Cookies

We use only essential cookies needed to keep you logged in. We do not use advertising or third-party tracking cookies. For understanding overall site usage we use privacy-friendly, cookieless analytics (Vercel Analytics) that measure aggregate traffic only and do not identify you or track you across sites.

6. How long we keep it

We keep your account and documents for as long as your account is active. If you close your account, we delete your personal information within a reasonable period, except where we are required by law (for example, tax records) to keep certain information for longer.

7. How we protect it

Data is encrypted in transit (HTTPS). Access to your data is restricted to your own account through database-level access controls, and passwords are stored using industry-standard hashing. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information and will notify you and the Information Regulator of any breach affecting your personal information, as required by POPIA.

8. Your rights

You may access, correct or update your information at any time from your profile. You may request a copy of your data or ask us to delete your account and personal information by contacting privacy@zakr.co.za. You may also object to processing or withdraw consent, though this may mean we can no longer provide the service.

9. Children

Zakr is a business tool and is not intended for anyone under 18. We do not knowingly collect the personal information of children.

10. Changes

We may update this policy from time to time. We will change the "last updated" date above, and for significant changes we will let you know in the app or by email.

Questions? Email privacy@zakr.co.za.