Your privacy matters

When you create an account on Depaper, we collect your name, email address, and South African ID number. Your ID number is used solely to pre-fill workflows and is never shared with third parties without your explicit consent.

When you fill in or submit a workflow, we collect the data you enter into that workflow and route it to the relevant organisation. We also store a copy in your submission history so you can reference it later.

When you use the Depaper platform, we automatically collect standard usage data including your device type, browser, and anonymised interaction patterns. This helps us improve the platform experience.

Your profile information is used to pre-fill workflows on your behalf so you do not need to re-enter your details every time you use a new workflow. You control what is stored in your profile and can edit or delete it at any time.

Submission data is forwarded to the organisation whose workflow you completed. Depaper acts as a processor on your behalf; the organisation that owns the workflow is the responsible party for how they use that data.

We use anonymised usage analytics to understand how users interact with the platform, identify problems, and prioritise improvements. This data cannot be used to identify you personally.

Depaper processes personal information in accordance with the Protection of Personal Information Act (POPIA), Act 4 of 2013. Every workflow submission includes a POPIA consent checkbox that you must acknowledge before your data is processed.

You have the right to access, correct, or delete your personal information at any time. To submit a data access or deletion request, contact us at privacy@Depaper.co.za.

We retain submission records for 24 months from the date of submission unless you request earlier deletion or unless legal obligations require a different retention period.

All data transmitted between your device and Depaper is encrypted in transit using TLS 1.3. Data stored on our platform is encrypted at rest using industry-standard AES-256 encryption.

We use Convex as our backend infrastructure provider, which maintains SOC 2 Type II compliance. Authentication is managed by Clerk, which is ISO 27001 certified.

No authentication credentials are ever stored by Depaper directly. We never store plain-text passwords.

We do not sell your personal information to any third party, ever.

We share workflow submission data with the specific organisation whose workflow you completed, as required to fulfil the purpose of the workflow. This sharing is disclosed to you at the point of submission.

We may share data with service providers who help us operate the platform (such as cloud infrastructure, authentication, and email delivery). These providers are contractually bound to protect your data and may not use it for their own purposes.

Depaper uses strictly necessary cookies to maintain your session after you sign in. We do not use advertising cookies or cross-site tracking cookies.

We use anonymised analytics data to understand aggregate usage patterns. No personally identifiable information is included in this data.

You have the right to know what personal information we hold about you, to request a copy of it, to correct inaccurate information, and to request deletion of your data where legally permissible.

To exercise any of these rights, contact our Information Officer at privacy@Depaper.co.za. We will respond to verified requests within 30 days.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email and update the effective date at the top of this page. Continued use of the platform after a change constitutes your acceptance of the updated policy.