POPIA and Data Protection

Last updated: 27 September 2026

Vali is built for South African businesses, and the Protection of Personal Information Act (POPIA) applies to how we handle personal information. This page says how we meet it. Our Privacy Policy has the full detail of what we collect and why.

Who is responsible

Teacup Technology cc is the responsible party for personal information collected on vali.co.za and for our own customer records. Our Information Officer can be reached at help@vali.co.za.

When your company captures its own customers', suppliers' and staff's personal information inside Vali, your company is the responsible party for that information and we are the operator processing it on your instructions. We only use it to provide Vali to you.

The conditions we work to

POPIA sets eight conditions for lawful processing. In plain words, this is how Vali meets them:

1. Accountability: we have a named Information Officer and this policy.
2. Processing limitation: we collect only what we need to run Vali and answer you, and we do not sell or share it.
3. Purpose: we say on the Privacy Policy exactly why we collect each kind of information.
4. Further processing: we do not use your information for a new purpose without telling you.
5. Information quality: you can correct your own details at any time inside Vali or by asking us.
6. Openness: this page and the Privacy Policy are public.
7. Security: see below.
8. Data subject participation: see your rights below.

Where personal information is kept

Vali and its backups are hosted in South Africa. The only case where information leaves the country is if you choose to connect your own AI provider account, such as OpenAI or Claude; then what you send to the assistant goes to that provider under your agreement with them.

Keeping companies separate

Each customer company's information is stored separately from every other business on Vali. Your bookkeeper, if you have one on Vali, works inside your company under their own login, and everything they do is recorded in your company's activity log.

Security safeguards

Encrypted connections, hashed passwords, optional two-step sign-in with an authenticator app, role-based access so people only see what their job needs, a company password vault encrypted on your own device, regular backups, and a short undo window on deletions. We review these measures as Vali grows.

Our free calculators

The free tools on this site run entirely in your own web browser. Nothing you type into them is sent to us, so no personal or financial information from those tools is processed or stored by Vali.

Your rights as a data subject

You may ask us what personal information we hold about you, to correct or delete it, to stop processing it where the law allows, and to object to direct marketing. Send requests to help@vali.co.za and we answer within 30 days. You may also complain to the Information Regulator: inforeg.org.za, or email complaints.IR@justice.gov.za.

Breaches

If a security breach affects personal information we hold, we notify the Information Regulator and the people affected as soon as reasonably possible, as section 22 of POPIA requires.

Changes

When this page changes we update the date at the top.