Privacy Policy

1. Introduction

Fraudlr ("we", "our", or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our fraud detection platform and services.

This policy complies with the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa and the General Data Protection Regulation (GDPR) where applicable.

Jurisdiction: This Privacy Policy is governed by the laws of the Republic of South Africa. Our operations are based in South Africa, and any disputes arising from this policy shall be subject to the exclusive jurisdiction of South African courts.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

• Register for an account
• Use our services
• Contact us for support
• Subscribe to our newsletter

This information may include:

• Name and contact information (email address, phone number)
• Company information
• Login credentials
• Payment information
• Communication preferences

2.2 Automatically Collected Information

When you access our platform, we automatically collect certain information, including:

• Log and usage data (IP address, browser type, operating system)
• Device information
• Cookies and similar tracking technologies
• Usage patterns and preferences

2.3 Transaction Data

For fraud detection purposes, we process transaction data that you upload or integrate into our platform. This may include financial transaction details, customer behavior patterns, and other data necessary for fraud analysis.

3. How We Use Your Information

We process your personal information for the following purposes, in accordance with POPIA's lawful processing conditions:

• Service Delivery: To provide, maintain, and improve our fraud detection services
• Account Management: To create and manage your account
• Communication: To send you technical notices, updates, security alerts, and support messages
• Analytics: To understand how our services are used and improve user experience
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Fraud Prevention: To detect, prevent, and address fraud and security issues
• Marketing: With your consent, to send promotional communications (you may opt-out at any time)

4. Legal Basis for Processing

Under POPIA and GDPR, we process your personal information based on:

• Consent: You have given clear consent for us to process your personal information for specific purposes
• Contract: Processing is necessary for the performance of a contract with you
• Legal Obligation: Processing is necessary to comply with the law
• Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided your rights do not override these interests

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (e.g., hosting, analytics, payment processing)
• Legal Requirements: When required by law or to respond to legal processes
• Business Transfers: In connection with any merger, sale of company assets, or acquisition
• With Your Consent: When you have given explicit consent to share your information

We ensure that all third parties are contractually bound to protect your personal information in accordance with POPIA and GDPR standards.

6. International Data Transfers

Your information may be transferred to and processed in countries other than South Africa. When we transfer personal information internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the South African Information Regulator
• Adequacy decisions by relevant authorities
• Binding corporate rules
• Your explicit consent where required

7. Your Rights Under POPIA and GDPR

You have the following rights regarding your personal information:

• Right to Access: Request access to your personal information
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal information (subject to legal obligations)
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time (without affecting prior lawful processing)
• Right to Lodge a Complaint: File a complaint with the Information Regulator of South Africa

To exercise any of these rights, please contact us using the details provided in Section 12.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication measures
• Employee training on data protection
• Incident response and breach notification procedures

While we strive to protect your personal information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify you and relevant authorities of any data breaches as required by POPIA.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary based on:

• The nature of the data
• Legal and regulatory requirements
• Contractual obligations
• Legitimate business purposes

When personal information is no longer needed, we will securely delete or anonymize it in accordance with POPIA requirements.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. You can control cookie preferences through your browser settings. Our cookie usage includes:

• Essential Cookies: Necessary for the platform to function
• Performance Cookies: Help us understand how visitors use our platform
• Functionality Cookies: Remember your preferences and choices
• Marketing Cookies: Used to deliver relevant advertisements (with your consent)

11. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

12. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Information Regulator (South Africa):

If you are not satisfied with our response, you may lodge a complaint with the Information Regulator at:

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

14. Acceptance of This Policy

By using our services, you acknowledge that you have read and understood this Privacy Policy and agree to be bound by its terms. If you do not agree with this policy, please do not use our services.