ApproveIt Privacy Policy

Privacy Policy for ApproveIt by FlowFusion

Effective Date: 2025/01/17
Last Updated: 2025/01/17

At FlowFusion, we are committed to protecting your privacy. This Privacy Policy outlines how ApproveIt collects, uses, and protects your personal information in compliance with the General Data Protection Regulation (GDPR) and South Africa’s Protection of Personal Information Act (POPIA).

1. Information We Collect

When you use ApproveIt, we may collect the following types of information:

a. Personal Information

Name, email address, and authentication details during registration.
Device information, such as operating system, device ID, and push notification token.

b. Approval Data

Details related to approval requests, including descriptions, actions, and attached documents provided by integrated systems.

c. Usage Data

Metrics like app usage, crash reports, and analytics to enhance functionality and user experience.

2. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal bases:

Performance of a Contract: To provide approval management services as described.
Consent: When required, such as for optional features.
Legitimate Interests: To improve our app and ensure security.
Legal Obligations: To comply with applicable laws.

3. How We Use Your Information

We use your information to:

Deliver and manage approval requests.
Send push notifications for approval actions.
Provide customer support.
Improve app functionality and performance.
Comply with legal and regulatory obligations.

4. Your Rights Under GDPR and POPIA

As a user, you have specific rights regarding your personal data:

Under GDPR (for EU Users):

Right to Access: Request a copy of your data.
Right to Rectification: Correct inaccurate or incomplete data.
Right to Erasure: Request deletion of your data where applicable.
Right to Restrict Processing: Limit how we use your data in certain circumstances.
Right to Data Portability: Obtain your data in a structured, machine-readable format.
Right to Object: Opt-out of data processing for specific purposes.

Under POPIA (for South African Users):

Right to Know: Be informed about how your personal information is processed.
Right to Access: Request access to your personal information.
Right to Correction or Deletion: Update or delete personal data where necessary.
Right to Object: Object to direct marketing or other processing activities.

To exercise your rights, contact us at info@flowfusion.co.za.

5. Data Transfers and International Processing

If you access ApproveIt from outside South Africa, note that your data may be transferred to and processed in countries with differing data protection laws. We ensure such transfers comply with GDPR and POPIA standards, using appropriate safeguards like contractual agreements.

6. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or comply with legal obligations.

7. Data Security

We implement robust security measures to safeguard your personal information. While we strive to ensure absolute security, no system is entirely foolproof.

8. Third-Party Processors

We may engage trusted third-party service providers to assist with hosting, analytics, or notifications. These processors adhere to GDPR and POPIA standards.

9. Your Consent

By using ApproveIt, you consent to the collection and processing of your information as described in this policy.

10. Changes to This Policy

We may update this Privacy Policy periodically. If significant changes are made, we will notify users via the app or email.

11. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy, please contact us at:

FlowFusion
https://flowfusion.co.za
Email: info@flowfusion.co.za

For GDPR-specific inquiries, you may contact our Data Protection Officer (DPO) at: info@flowfusion.co.za.
For POPIA-related queries, you may contact our Information Officer at: info@flowfusion.co.za.