Terms, Privacy & Policies

Roles under POPIA

For the personal information of your own customers, your business is the responsible party and SettleMe acts as the operator, processing that information only on your instruction.

Information We Collect

Account details, business profile information (including banking details you choose to show on invoices), the customers and invoices you create, files you upload, and operational data such as invoice views and email deliveries. Free invoice downloads are also saved, including the business, customer, line-item and banking details you enter. A download made while signed in is saved to your verified account. Otherwise, its temporary server copy expires after seven days and is removed by a recurring cleanup; the private download link lets you review and save that one copy to a verified account before expiry. Entering an email address does not establish ownership. You can remove unimported saved copies; imported business records follow the separate retention rules below. Existing unclaimed copies receive a seven-day expiry when this change is introduced. PDFs already downloaded to your device are unaffected.

Purpose of Processing

Information is processed to create and manage invoices and accounts, provide customer support, maintain security, prevent fraud, meet legal obligations, improve the service, measure whether our own advertising led to a new account, and — where you have opted in — send you occasional product news and updates.

Lawful Processing

Personal information is processed only in accordance with POPIA and only where a lawful basis exists.

Sharing & Processors

SettleMe does not sell personal information. Information may be disclosed to the infrastructure providers necessary to operate the Platform — including hosting, email delivery and file-storage providers — or where required by law, court order or a competent regulator. Website signup advertising measurement is described in PP-007.

Your POPIA Rights

You may request access to your personal information, request correction, request deletion where applicable, withdraw consent where processing relies on it, and lodge a complaint with the Information Regulator.

Website Signup Advertising Measurement

When advertising measurement is enabled, we report verified website registrations to Meta to measure our advertising. The report includes a SHA-256 hash of the account email, an account identifier used to avoid duplicate reports, the event time and the signup page address. It may also include the IP address and browser information from email verification and a captured Meta ad-click identifier. A hashed email can still be matched to an account; it is not anonymous. Registrations made in the native iPhone app, and registrations whose source cannot be established, are excluded from this reporting. Invoice customers' information is not included. This server-based reporting does not require an advertising cookie.