FinReady SA is operated by Baldeo and Co, a business registered in the Republic of South Africa. Baldeo and Co is the responsible party (data controller) for the personal information described here, and decides why and how it is processed. This Privacy Policy explains how we handle personal information in line with the Protection of Personal Information Act, 2013 (POPIA).
1. Information we process
- Account information: name, email, phone (optional).
- Business information: registration details, industry, province, VAT status.
- Documents you upload: bank statements, invoices, receipts, sales and supplier exports.
- Derived information: extracted transactions, suggested categories, draft reports.
- Technical information: IP address, browser, device, log data.
2. Why we process it, and on what basis
- To provide the platform and generate AI-assisted draft financial summaries, necessary to perform our agreement with you.
- To process your purchase of a Draft Pack, including order confirmation, invoicing and refunds, necessary to perform our agreement with you.
- To support, secure and improve the platform, and to prevent fraud and misuse, our legitimate interest in running a safe, reliable service.
- To send you service and marketing messages you have asked for, your consent, which you may withdraw at any time.
- To meet legal, tax and regulatory obligations, compliance with law.
3. AI processing
Documents and transactions are processed by AI models via secure edge functions to extract and categorise data. Only the data needed for that task is sent.
4. Storage and security
Documents and reports are stored in private buckets with row-level security. Access is restricted to authenticated members of the relevant business.
5. Your POPIA rights
- Access, request a copy of the personal information we hold about you.
- Correction, request correction of inaccurate information.
- Deletion, request deletion of your account and associated documents.
- Restriction, request restriction of further processing.
You can submit any of these requests from the Data Centre in your account, or via the contact page.
6. Who we share information with
We do not sell or rent your personal information. We share it only with:
- Service providers who help us run the platform (hosting, AI processing, email delivery), all bound by appropriate safeguards.
- Paddle.com Market Limited, our online reseller and Merchant of Record. When you buy a Draft Pack, Paddle sells it to you, collects your payment and billing details directly, handles invoicing, tax compliance, customer billing queries and refunds, and confirms your completed order to us. Paddle acts as its own responsible party for that payment information; see the Paddle Privacy Notice. We never receive or store your full card details.
- Our professional advisers (legal and accounting), where needed.
- Authorities, where we are required to do so by law.
Some of these providers process information outside South Africa. Where that happens, we only use providers who offer a comparable level of protection or are bound by contractual safeguards.
7. Retention
You can delete documents at any time. We retain account and audit log data for as long as your account is active, and thereafter only for as long as the law requires. Once it is no longer needed, information is deleted or anonymised.
8. Children
FinReady SA is not intended for users under 18.
9. Changes
We will notify you of material changes to this policy via email or in-app notice.