This Policy explains how Xee Holdings (Pty) Ltd processes personal information in line with the Protection of Personal Information Act, 2013 (POPIA).
Our Information Officer can be reached at privacy@xeesecurity.com.
Account details (name, work email, company), authentication data (a salted password hash — never the password itself), billing information processed by our payment provider, and product usage and security logs.
To provide and secure the Service, to bill you, to send transactional email (verification, password reset, billing notices), and to meet legal obligations. Processing is justified by the performance of our contract with you and our legitimate interest in operating a secure service.
We share personal information only with sub-processors that help us run the Service (hosting, email delivery, payments), each under appropriate safeguards. We do not sell personal information.
Passwords are stored using PBKDF2. Sensitive secrets are encrypted at rest. Access is restricted and logged.
We keep personal information for as long as your account is active and as required by law, then delete or anonymise it.
Under POPIA you may access, correct or delete your personal information, and object to processing. Contact our Information Officer to exercise these rights. You may also lodge a complaint with the Information Regulator (South Africa).