CashGrip Privacy Policy

CashGrip (“we”, “us”, “our”) is a product of ElevateIQ PTY LTD. We take privacy seriously and comply with South Africa’s Protection of Personal Information Act (POPIA) and, where applicable, the EU General Data Protection Regulation (GDPR). This policy explains what we collect, how we use it, and your rights.

1. Who we are & Data Controller

Data Controller: ElevateIQ PTY LTD (Reg No. 2024/737044/07), South Africa. For data protection queries, email privacy@cashgrip.co.za.

2. What we collect

Account & organisation data: name, email, role (Owner/Member/Accountant), company details.
Operational metadata: configuration settings (e.g., email/WhatsApp sender setup), bank/card references you add (no banking credentials in Phase 0).
Product usage: pages/features used, device info, approximate location (via IP), diagnostics (logs/events).
Communications: emails/WhatsApp you opt into.

3. How we use data

Provide and improve CashGrip features and reliability.
Operate org/user roles, settings, alerts, and waitlist onboarding.
Security, abuse prevention, debugging, and legal compliance.
Product updates and onboarding messages (only if you opt in where required).

4. Legal bases (GDPR)

Contract — to provide requested services.
Legitimate interests — product analytics, security, and fraud prevention, balanced against your rights.
Consent — marketing emails/WhatsApp where required (can be withdrawn).
Legal obligation — compliance with applicable laws.

5. Your rights (POPIA/GDPR)

You may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. You can also withdraw consent for optional communications.

To exercise rights, contact privacy@cashgrip.co.za. We’ll verify your request and respond within the timelines required by law.

7. International transfers

If data is processed outside your country, we use legally appropriate mechanisms (e.g., Standard Contractual Clauses) and technical safeguards.

8. Retention

We keep data only as long as necessary for the purposes above, to comply with legal obligations, or to resolve disputes. You can request deletion of your account data (subject to legal/operational limits).

9. Security

We use technical and organisational measures appropriate to the risk (encryption in transit, access controls, monitoring). No system is 100% secure; we work continuously to improve our safeguards.

10. Cookies & tracking

We use necessary cookies to run the site and may use optional analytics cookies to improve the product. Where required, we’ll ask for consent and provide controls.

Manage preferences anytime:

11. Do Not Track

Some browsers offer “Do Not Track” (DNT). We don’t currently respond to DNT signals. You can manage cookies via the controls above or your browser.

12. Children

CashGrip isn’t intended for individuals under 18. We don’t knowingly collect data from children.

13. Changes to this policy

We may update this policy periodically. If changes are significant, we’ll notify you in‑product or by email and update the “Last updated” date.

14. Contact

Data Protection Contact: privacy@cashgrip.co.za
ElevateIQ PTY LTD — Registered in South Africa (Reg No. 2024/737044/07)