Privacy Policy

Last updated: 20 June 2026

⚠️ This is placeholder content and not legal advice. Replace it with text reviewed by a qualified attorney before launch.

This Privacy Policy explains how IDOTOO collects, uses, and protects your personal information, in line with the Protection of Personal Information Act (POPIA). Your privacy is central to how this service is built.

1. Information we collect

We collect the details you provide at registration (names, email, phone, and South African ID numbers), and the report data we retrieve on your behalf from official sources such as Home Affairs (DHA), TransUnion, the Deeds Office, and CIPC.

2. How your ID number is protected

Your ID number is encrypted with AES-256 the moment it leaves your browser and is never stored in plain text. It is only ever decrypted server-side, within South Africa, for the sole purpose of generating your report.

3. Lawful basis and consent

We process your personal information on the basis of your explicit consent. Both partners must consent independently before any query is made. You may withdraw consent at any time from your account settings.

4. Where your data is stored

All personal information is processed and stored on infrastructure located in South Africa (af-south-1), and is not transferred outside the country except where strictly necessary and lawfully permitted.

5. Data retention

Report data is retained for 12 months, raw third-party responses for 90 days, and consent records for 5 years as required by regulation. You can request earlier deletion at any time.

6. Your rights under POPIA

You have the right to access, correct, or delete your personal information, to object to processing, and to lodge a complaint with the Information Regulator. Deletion requests are actioned within 30 days.

7. Contact

For any privacy request or question, contact our Information Officer at privacy@idotoo.co.za.

Questions? Contact us at privacy@idotoo.co.za.