Privacy Policy

1.Who we are

Our products are B2B platforms - our direct customers are businesses ("tenants" or "accounts"), and the personal information we process largely belongs to those businesses' own employees and authorised users. Our products are not directed at, and do not knowingly collect information from, individual consumers or minors.

2.Information we collect

We collect the following categories of personal information across our products and this website:

• Account and identity data - name, work email address, job title, and authentication credentials for each user your organisation invites to a product.
• Usage data - actions taken within a product (workflows created, documents uploaded, invoices issued, features used) needed to operate and improve the service.
• Content you provide - documents, workflow configurations, billing records, and other business data your organisation stores or processes through a product.
• Communications with AI-powered features - messages you send to LRX One Hive's AI Assistant, processed to generate responses.
• Billing information - processed on our behalf by our payment processors (see Section 4); we do not store full card numbers ourselves.
• Technical data - IP address, browser type, and device information, collected automatically for security and service-reliability purposes.
• Contact enquiries - name, email, and message content, when you contact us via email or a form on this website.

3.How we use it

We process personal information to:

• Provide, maintain, and secure our products for your organisation.
• Authenticate users and enforce your organisation's access controls.
• Process payments and manage subscriptions.
• Respond to enquiries, support requests, and communicate service-related notices.
• Improve our products, informed by aggregated usage patterns.
• Comply with our own legal obligations, including South African financial recordkeeping requirements.

4.Who we share it with

We share personal information only with third-party service providers ("operators", in POPIA terms) who process it on our behalf to deliver our products, under contractual confidentiality and security obligations. We do not sell personal information.

Our infrastructure is hosted in AWS South Africa and EU regions. Some processors listed above may process data outside these regions as part of their own service delivery; where that happens, we rely on contractual safeguards consistent with POPIA's cross-border transfer requirements.

5.Data retention

• Account and platform data is retained for 12 months after subscription cancellation, after which it is deleted unless you request earlier deletion (see Section 7).
• Financial records (invoices, payment records) are retained for 7 years, as required under South African tax and financial legislation (FICA).

6.Security

We apply technical and organisational measures appropriate to the sensitivity of the information we hold, including encryption in transit, access controls scoped to each tenant, and infrastructure hosted in a secured AWS environment. No system is completely immune to risk, and we continuously work to improve our safeguards.

7.Your rights

Under POPIA, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or outdated information.
• Request deletion of your personal information, subject to our legal retention obligations (Section 5).
• Object to processing carried out on the basis of legitimate interest.
• Lodge a complaint with the Information Regulator of South Africa.

If you're an individual user of a tenant on one of our products, requests about your own account data should generally go through your organisation's administrator first, since they control your account. Tenant administrators can submit a deletion request for their organisation's data through the relevant product's settings, or by contacting our Information Officer at brandon@lrxtechgroup.com.

8.Changes to this policy

We may update this policy from time to time. Material changes will be communicated to active customers by email. The "Last updated" date at the top of this page always reflects the current version.

9.Contact us

Questions about this policy or how we handle personal information can be directed to our Information Officer, Brandon Le Roux, at brandon@lrxtechgroup.com.