Legal
Privacy Policy
Last updated: February 2026
1. Who We Are
SA Wages Pro is operated by SA Wages Pro (Pty) Ltd, accessible at wagespro.co.za and app.wagespro.co.za. We provide payroll, compliance, and HR management software for South African employers.
This Privacy Policy explains how we collect, use, and protect your personal information in compliance with the Protection of Personal Information Act, 2013 (POPIA).
2. Information We Collect
Account & Profile Information
- Name and email address
- Business name, address, and COIDA/UIF registration numbers (optional)
- Billing details (processed by PayFast — we do not store card numbers)
Employee Data You Enter
You input employee personal information (names, ID numbers, banking details, salary records). This data is stored on your behalf and is only accessible by you. We act as a data processor for this information under POPIA.
Usage & Technical Data
- Pages visited, features used (for product improvement)
- IP address, browser type, and device information
- Error logs and performance data
3. How We Use Your Information
- Service delivery — generating payslips, compliance reports, and HR documents
- Billing — processing payments and sending receipts via PayFast
- Email communications — account alerts, compliance reminders, and support replies
- Legal compliance — meeting obligations under South African law
- Product improvement — understanding how the platform is used
We do not sell, rent, or share your personal information with third parties for marketing.
4. Data Storage & Security
All data is stored on Supabase (AWS infrastructure) with AES-256 encryption at rest and TLS/HTTPS in transit. We implement Row-Level Security at the database level — each account can only ever access its own data.
Access to production systems is restricted to authorised personnel using multi-factor authentication.
5. Third-Party Services
- Supabase — database, authentication, and file storage
- PayFast — payment processing
- Resend — transactional email delivery
- Vercel — application hosting
Each provider is bound by data processing agreements and complies with applicable data protection law.
6. Data Retention
We retain your data while your account is active and for the minimum period required by South African law (5 years for payroll records under the BCEA). On account deletion requests, personal data is removed within 30 days except where retention is legally required.
After Subscription Cancellation or Expiry
When a subscription is cancelled or expires, your data is retained for 6 months in read-only mode. During this window you may log in, view records, and export data. After 6 months, personal data (employee names, ID numbers, banking details, and other identifying information) is anonymised in accordance with POPIA. Aggregate records may be retained where legally required.
Agri Worker Data
Farm worker data, seasonal worker data, piece-rate logs, work stoppages, and farm perks follow the same retention and anonymisation rules as standard employee data. If the Agri Add-On is cancelled while the base plan remains active, agri data enters the 6-month retention window independently.
Grace Period
During the 48-hour grace period after a payment failure, all data remains accessible in read-only mode. No data is deleted or modified during the grace period.
7. Your Rights Under POPIA
You have the right to:
- Request access to personal information we hold about you
- Request correction of inaccurate personal information
- Request deletion (subject to legal obligations)
- Object to the processing of your personal information
- Lodge a complaint with the Information Regulator (inforegulator.org.za)
Contact our Information Officer at privacy@wagespro.co.za.
8. Cookies
We use essential cookies only for authentication and session management. We do not use advertising or tracking cookies. Disabling cookies may prevent you from logging in.
9. Contact
For privacy queries: privacy@wagespro.co.za
For general support: support@wagespro.co.za
