SA Accrual Calculator

Privacy policy

How accrual.co.za collects, uses, and protects personal information under the Protection of Personal Information Act 4 of 2013 (POPIA).

Who we are

accrual.co.za is operated by Accrual Calculator (Pty) Ltd, a company registered in South Africa under registration number 2026/461734/07. In this policy "we", "us", and "our" refer to Accrual Calculator (Pty) Ltd. We are the responsible party for the personal information described here.

Our registered address is Elaleni, Sheffield Beach, KwaZulu-Natal, South Africa.

What we collect and why

We keep the personal information we hold to the minimum the service needs to work.

  • Your email address — used to sign you in by magic link and to send service email about your account and purchases. We do not store passwords.
  • Calculation inputs you enter — the figures and descriptions you type into a calculation (commencement values, asset and liability values, dates, and free-text descriptions). We ask you not to enter spouses' full names or identity numbers; see "Data you should not enter" below.
  • Payment records — records of credit purchases (amount, date, and a reference). Card details are handled by our payment processor and are never seen or stored by us.

Data you should not enter

To minimise the personal information held in a calculation, do not enter spouses' full names, identity numbers, or other directly identifying details in free-text description fields. The calculation does not need them.

How long we keep it

We keep your account email while your account is active. We keep calculation records and payment records for as long as we need them to provide the service and to meet legal, accounting, and audit obligations. When a calculation is sealed, an integrity hash of that calculation is retained as a record even if the underlying inputs are later deleted.

Your rights

Under POPIA you may, in respect of the personal information we hold about you:

  • ask what personal information we hold and request access to it;
  • ask us to correct information that is inaccurate or out of date;
  • ask us to delete your personal information, subject to records we are required or entitled to retain.

To delete your account and personal information, use the account deletion flow at /account/delete. On deletion we anonymise your email and name; retained calculation integrity hashes are kept as records, as described above. For access or correction requests, contact our Information Officer below.

Who processes your data on our behalf

We use the following operators to run the service. Each processes personal information only to provide its part of the service.

  • Neon — database hosting (stores your account, calculations, and payment records).
  • Vercel — application hosting and serving of the website.
  • Resend — sending sign-in and service email.
  • Cloudflare R2 — storage of sealed calculation PDFs.
  • Upstash — rate-limiting of sign-in and payment-notification requests.
  • Payfast — processing payments. We do not see or store your card details.
  • Sentry — error monitoring, with personal information scrubbed.
  • Plausible — cookieless, privacy-friendly usage analytics. It does not use cookies and does not track you across sites.

Where your data is processed (cross-border transfers)

Some of the operators we use to run the service process or store personal information on servers outside South Africa. POPIA permits these transfers, and we use operators that are bound by written agreements requiring them to protect your personal information to a standard comparable to that required by POPIA. Payments are processed within South Africa by Payfast.

The following sub-processors may process or store personal information outside South Africa:

  • Neon — database hosting: your account email, the inputs you enter for a calculation, and your payment records.
  • Cloudflare R2 — document storage: the sealed calculation PDFs generated from your inputs.
  • Resend — email delivery: your email address, to send sign-in links and service email.
  • Vercel — hosting: data sent to and from the service to render pages and handle requests, including request and diagnostic logs.
  • Sentry — error monitoring: technical diagnostic data, with personal information scrubbed before it is sent.
  • Upstash — rate-limiting: your email address and IP address, used only to enforce limits on sign-in and payment-notification requests.
  • Plausible — analytics: aggregate, cookieless usage data only, with no cross-site tracking.

The categories of personal information that may be transferred are your email address, the inputs you enter for a calculation, and your payment records. We transfer only what each operator needs to perform its part of the service. If you would like more detail about a specific operator or the safeguards in place, contact our Information Officer below.

Information Officer

Information Officer: Tony Taylor
Contact: informationofficer@accrual.co.za

For privacy questions, access or correction requests, or complaints, contact our Information Officer at informationofficer@accrual.co.za. You also have the right to lodge a complaint with the Information Regulator (South Africa).

Changes to this policy

We may update this policy from time to time. Material changes will be reflected on this page.