Effective Date: 17 October 2026 · Version 2.1
Invoice Africa (Easy-Accounting) is a cloud-based invoicing and accounting service operated by Black Bar Technologies ("we", "our", "us"), a South African company. We process personal information in two distinct roles under the Protection of Personal Information Act, 2013 (POPIA):
This policy explains how we handle personal information in both roles. Capitalised terms have the meanings given in POPIA.
2.1 Information you provide. Account information (name, email address, phone number, business name, company code and password); your clients’ details and billing data; invoice and quotation data you create; and any messages you send us (including through the contact form and support tickets).
2.2 Information collected automatically. Device and browser information, IP address, pages visited, actions taken in the application, error logs and diagnostic data used to keep the service reliable and secure.
2.3 Payment information. When you subscribe, payments are processed by our payment partner PayFast. We do not see or store your full card number; PayFast handles card and banking details on their own secure systems.
2.4 Verification codes. One-time verification codes sent by email to confirm your address. Codes expire within 15 minutes and are not retained.
We use personal information only for the purposes for which it was collected, including:
We use a strictly necessary session cookie to keep you signed in and to protect the application against cross-site request forgery. We do not use analytics, advertising or cross-site tracking cookies on the application. You can block or delete cookies in your browser, but the service will then not be able to keep you signed in.
Cookie table: session cookie (essential, expires when you close the session or after the configured session lifetime); remember-me cookie (essential if you choose “remember me”, up to 30 days). We do not use third-party analytics or advertising trackers on the application.
We do not sell, rent or trade your personal information. We share it only with trusted parties that help us run the service, under confidentiality obligations:
Where information is transferred outside South Africa, we rely on appropriate safeguards recognised under section 72 of POPIA, including contractual protections that keep your information subject to standards substantially similar to POPIA.
We apply industry-standard safeguards, including: encryption of traffic in transit (TLS); encryption of sensitive fields at rest; role-based access control so only authorised people reach the data they need; full audit logging of significant actions; least-privilege staff access; and encrypted, regularly tested backups. While no method of transmission or storage is completely secure, we work hard to keep your information safe.
If a security breach compromises your personal information, we will notify you and the Information Regulator without undue delay, as required by section 22 of POPIA, and we will tell you what we are doing about it.
Under POPIA you may, on reasonable notice, request us to confirm what personal information we hold about you, and to correct, update or delete it, or to object to its processing. To exercise any of these rights, email info@blackbartechnologies.co.za and we aim to respond within 30 days, and POPIA requires a response within a reasonable time. If you are unhappy with how we handle your information, you may lodge a complaint with the Information Regulator (South Africa): Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191 · telephone 010 023 5200 · enquiries@inforegulator.org.za · POPIA complaints POPIAComplaints@inforegulator.org.za · inforegulator.org.za.
Employees and users of your business: if you use our service on behalf of an employer or client, that organisation controls the business data held on the platform. Contact the organisation’s administrator for access to or correction of that data; we will assist the organisation as its operator.
Our service is intended for businesses. We do not knowingly collect personal information of children under 18 without the consent of a competent person, as required by section 34 of POPIA.
We may update this policy from time to time. The current version always appears on this page with its effective date. Material changes will be highlighted in the application before they take effect.
Black Bar Technologies (Pty) Ltd is a private company registered in the Republic of South Africa under registration number 2020/017308/07. We are not registered for VAT. Trading address: 35 Glenroy Drive, Glenroy Park, Gqeberha, Eastern Cape, 6025. Information Officer: Masibulele Gqiza. Email: info@blackbartechnologies.co.za. Telephone: +27 41 010 5035.
Requests for access to records under the Promotion of Access to Information Act 2 of 2000 (PAIA) may be sent to the Information Officer. Our PAIA manual describes the records we hold, the request procedure and the applicable fees, and is available from the Information Officer on request.
We aim to respond to data-subject requests within 30 days. If you are not satisfied with our response, you may complain to the Information Regulator using the details in section 9.
Questions about this policy or our handling of personal information: Black Bar Technologies · email info@blackbartechnologies.co.za · Gqeberha, Eastern Cape, South Africa.