Privacy Policy

1. Who we are

LE VIER (Pty) Ltd, trading as LEVIER(“we”, “us”, “our”), operates a family of business software products: Shake, Count, Build, Transport and Sell. This policy explains how we handle personal information across all of them.

• Legal entity: LE VIER (Pty) Ltd, a private company incorporated in the Republic of South Africa
• Registration number: 2024/645169/07
• Registered office: 3 Athlone Street, Swellendam, Western Cape, 6740, South Africa
• Information Officer: Janco Olivier, reachable at admin@levier.co.za

We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). Where our services reach people in other jurisdictions, we apply the same standards.

2. Our two different roles

POPIA distinguishes between the party that decides why and how information is processed (the responsible party) and a party that processes it on someone else’s behalf (the operator). Which one we are depends on whose information is involved.

If you are unsure who holds your information, email us and we will tell you, or point you to the right party.

3. What we collect

Information you give us

• Account details — name, email address, phone number, password (stored hashed, never in plain text), business name and role.
• Billing details — billing address, VAT number, and the plan you are on. Card numbers are captured by our payment providers and never stored on our systems.
• Content you enter — whatever you put into the product: invoices and ledgers in Count, work orders and parts in Build, routes and consignments in Transport, product listings and orders in Sell, equipment listings and enquiries in Shake.
• Communications — messages you send us by email, in-product chat or contact form.

Information we collect automatically

• Usage data — pages viewed, features used, timestamps, referring page.
• Device and connection data — IP address, browser type and version, operating system, screen size, language.
• Cookies and similar technologies — see section 8.
• Location data — Transport processes vehicle and consignment locations where a customer has enabled it. This is collected on that customer’s instruction, not ours.

Information from third parties

• Payment and settlement status from payment providers.
• Authentication details if you sign in through a third-party identity provider.
• Delivery status from couriers and logistics partners.

Google account data

If you are a Sell merchant, you can optionally connect your own Google account to enable specific integrations. Each is a separate connection you switch on yourself — none of this data is accessed unless you explicitly connect that integration — and each requests only the Google permission (OAuth scope) it needs to do its job:

Every connection also reads your connected Google account’s email address, purely so our admin screen can show you which account is linked and let you confirm it is the right one. We do not read your Gmail, Drive, Calendar or any other Google product, and we only use the data returned by these integrations to provide that specific feature back to you inside Sell — never for advertising, and never shared with anyone outside the merchant account that connected it.

You can disconnect any of these at any time from your Sell integration settings, or revoke Sell’s access directly from your Google account at myaccount.google.com/permissions. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Why we process it, and on what basis

POPIA requires a lawful justification for each purpose. Ours are:

We do not sell personal information, and we do not use the content you put into Count, Build, Transport or Sell to build advertising profiles.

5. Who we share it with

We share personal information only in these circumstances:

• Service providers (operators). Hosting, database, email delivery, payment processing, error monitoring and analytics providers who process data on our instruction under written agreements requiring confidentiality and adequate security.
• Merchants and sellers. If you place an order through a Sell storefront or enquire about a listing on Shake, we pass the details that the merchant or seller needs to fulfil it — your name, contact details, delivery address and order contents.
• Couriers and logistics partners, to deliver goods you have ordered.
• Professional advisers — auditors, accountants and lawyers, under confidentiality obligations.
• Authorities, where we are legally required to disclose, or where disclosure is necessary to protect someone’s safety or our legal rights.
• A successor, if the business or a product is sold or merged. We will notify you before your information becomes subject to a different privacy policy.

6. Sending information outside South Africa

Some of our service providers host or process data outside South Africa. Section 72 of POPIA permits this where the recipient is bound by rules providing an adequate level of protection, or where the transfer is necessary to perform our contract with you. We rely on contractual safeguards with each provider. You may ask us which providers are involved and where they are located.

7. How long we keep it

• Account data — for as long as your account is active, then up to 12 months after closure to allow reactivation and to resolve disputes.
• Financial and transaction records — at least 5 years, as required by South African tax and companies legislation.
• Customer content — deleted or returned per our agreement with the customer, ordinarily within 30 days of account closure.
• Security and access logs — up to 12 months.
• Support correspondence — up to 3 years.

After these periods we delete the information or de-identify it so it can no longer be linked to you.

8. Cookies

We use a small number of cookies and similar technologies:

• Strictly necessary — sign-in sessions, security tokens, load balancing. These cannot be switched off without breaking the service.
• Functional — remembering your preferences, such as theme or language.
• Analytics — aggregate, privacy-preserving measurement of how our sites are used, so we can improve them.

We do not use advertising or cross-site tracking cookies. You can block or delete cookies in your browser settings; strictly necessary cookies are required for signed-in areas to work.

9. Your rights

Under POPIA you have the right to:

• Be told whether we hold personal information about you, and to receive a copy of it.
• Correct or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully.
• Object to processing based on legitimate interest, on reasonable grounds.
• Opt out of direct marketing at any time, using the unsubscribe link or by emailing us.
• Not be subject to a decision based solely on automated processing that significantly affects you.
• Complain to the Information Regulator.

To exercise any of these, email admin@levier.co.za. We will respond within 30 days. We may need to verify your identity first. Access requests are handled under the Promotion of Access to Information Act; a prescribed fee may apply to certain requests.

Complaints to the Regulator

If you are not satisfied with how we have handled your information, you may complain to the Information Regulator of South Africa: JD House, 27 Stiemens Street, Braamfontein, Johannesburg 2001 · complaints.IR@justice.gov.za. We would appreciate the chance to resolve it with you first.

10. Security

We take reasonable technical and organisational measures to protect personal information, including encryption in transit, encryption at rest for stored data, role-based access control, row-level database access rules, hashed passwords, audit logging and regular dependency patching. Access to production data is limited to personnel who need it.

No system is perfectly secure. If a breach occurs that creates a real risk of harm, we will notify the Information Regulator and affected people as soon as reasonably possible, as POPIA requires.

11. Children

Our products are business tools intended for people aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

12. Changes to this policy

We may update this policy as our products or the law change. The effective date at the top shows when it last changed. If a change materially affects your rights, we will tell you by email or an in-product notice before it takes effect.

13. Contact

Privacy questions, requests and complaints: admin@levier.co.za.