Privacy Policy

Last updated: 1 October 2026

Who we are

Vali is built and run by Teacup Technology cc, a South African software company. When this policy says "we" or "us", it means Teacup Technology cc. You can reach us at help@vali.co.za.

What we collect

• Details you give us when you request a demo, contact us, sign up or ask for a feature: your name, work email, phone number, company name and the company details you enter when your company is set up.
• The business information you put into Vali: your customers, suppliers, products, stock, invoices, bills, documents and everything else you capture while running your company on it.
• Website use: which pages on vali.co.za are visited and from what kind of device, measured with our own analytics, hosted by us in South Africa. So we can tell when someone comes back, the analytics keeps a random visitor number in your browser for 6 months after your last visit. It holds no name or IP address, and it is linked to you only if you fill in one of our forms. We do not use advertising trackers.
• Account use: sign-ins and actions inside Vali, kept in each company's own activity log so you can see who did what.

Why we collect it

• To answer your enquiry and set up your demo or your company.
• To run Vali for you, including billing your subscription and supporting you.
• To keep the service secure and to improve it.
• To meet our legal duties, such as keeping tax records.

We rely on the contract between you and us, on our legitimate interest in running the service, and on your consent where we ask for it. We do not sell your information and we do not send marketing you have not asked for.

Your business information stays yours

Everything you capture inside Vali belongs to you. Each company's information is kept separate from every other business on Vali. We only look at it to support you when you ask, to fix a problem, or where the law requires it.

Where your data lives

Vali and its data are hosted in South Africa. Backups are made regularly and kept in South Africa.

Who else sees it

We use a small number of providers to run the service, and each sees only what it needs:

• Hosting: South African data centres.
• Payments: PayFast, which processes card and EFT payments. We do not see or store your card number.
• Email delivery: the mail service that sends system emails such as sign-in links, receipts and notifications.
• AI providers: only if you connect your own OpenAI or Claude account. Then the text or images you send to the assistant go to that provider under your own agreement with them, not ours.

We do not give your information to anyone else unless the law requires it.

Our free calculators

The free tools on this site, such as the loan and bond calculator and the VAT calculator, work entirely inside your own web browser. The figures you type in are never sent to us. If you tick the box asking to remember your figures, they are saved in your browser on that device only; untick the box or clear your browser data and they are gone.

Cookies

Vali uses a session cookie to keep you signed in and a cookie to remember choices such as your company's web address on the login page. Our analytics uses no cookies; it keeps the random visitor number described under Website use in your browser's local storage. To remove it, clear this site's data in your browser. We do not use third-party advertising cookies.

How long we keep it

While your company is active on Vali, and afterwards for as long as the law requires us to keep records, which for tax and accounting records in South Africa is five years. If you cancel, you can export your lists first, and we delete or anonymise your company's data after the retention period.

Your rights

Under the Protection of Personal Information Act (POPIA) you may ask us:

• what personal information we hold about you;
• to correct or delete it;
• to stop processing it, where the law allows;
• to object to direct marketing (we do not do any unless you opt in).

Email help@vali.co.za. We answer within 30 days. If you are not satisfied, you may complain to the Information Regulator of South Africa at inforeg.org.za.

Security

Vali uses encrypted connections, hashed passwords, optional two-step sign-in with an authenticator app, and access controls so that people only see what their role allows. Each company's information is kept separate. Deleted records are held for a short time so mistakes can be undone, then removed. If a breach affects your information, we will tell you and the Information Regulator as POPIA requires.

Children

Vali is business software and is not intended for anyone under 18.

Changes to this policy

When we change this policy we update the date at the top and, for changes that matter, tell you inside Vali or by email.