Privacy Policy
Last updated: 18 June 2025
1. Introduction
BillCheck SA ("we", "us", "our") is a product of the Kgusiame Group. We are committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and applicable South African law. This policy describes how we collect, use, and protect your personal information.
2. Information we collect
- Bill data you enter: meter readings, billing amounts, account and meter numbers, and billing periods. This data is used solely to perform the anomaly analysis you request.
- Email address: collected only if you choose to receive your dispute letter by email, or if you create a subscription account. Not required for the free check.
- Payment information: processed by Paystack. We do not store card numbers on our servers.
- Usage data: anonymised analytics data (page views, feature usage) to improve the service.
- Cookies: see Section 6.
3. How we use your information
- To perform the bill anomaly analysis and generate your results.
- To generate and deliver your dispute letter PDF.
- To manage your subscription account and send subscription-related emails via Resend.
- To comply with legal obligations.
- We do not sell your personal information to third parties under any circumstances.
4. Legal basis for processing
We process your personal information on the basis of: (a) your explicit consent (POPIA Section 11(1)(a)), which you provide via the consent checkbox on any form that captures personal data; and (b) the performance of a contract between you and BillCheck SA (i.e., delivering the service you have paid for).
5. Data retention
Bill check data is retained for a maximum of 12 months from your last interaction with the service, after which it is deleted. If you close your subscription account, your personal data is deleted within 30 days, subject to any legal obligation to retain records longer.
6. Cookies
We use a single cookie consent preference stored in your browser's localStorage. If you accept cookies, we may also place analytics and advertising cookies (including Google AdSense, publisher ID ca-pub-6810340068920595). You can withdraw consent at any time by clearing your browser's localStorage.
7. Third-party services
- Supabase: database and authentication — data stored within AWS infrastructure.
- Paystack: payment processing — subject to Paystack's own privacy policy.
- Resend: transactional email delivery.
- Vercel: hosting and edge network.
- Google AdSense: advertising on free-tier result pages.
8. Your rights (POPIA)
Under POPIA, you have the right to: access personal information we hold about you; correct inaccurate information; request deletion of your data; object to processing; and lodge a complaint with the Information Regulator of South Africa at inforeg@justice.gov.za.
To exercise any of these rights, contact us via the support form on our website.
9. Changes to this policy
We may update this policy from time to time. The updated date at the top of this page reflects the most recent revision. Material changes will be communicated to registered users by email.