Privacy & data protection
Volta processes business data on behalf of South African SMB retailers and bookkeepers. This page summarises our POPIA-aligned practices for the self-serve platform.
For the full notice used for Google Play and merchant onboarding, see our Privacy Policy.
What we collect
- Account details (email, organisation name, team roles)
- Operational data (locations, products, sales, terminal pairing metadata)
- Billing records when you upgrade plan or add-ons
How we use it
Data is used to operate POS sync, back-office reporting, optional VoltaBooks ledger posting, and subscription enforcement. We do not sell personal information.
Your rights
Organisation owners may request export or deletion of their tenant data by contacting support. Export covers sales, catalog, and billing history in machine-readable formats. Full POPIA rights are described in the Privacy Policy.
Security
Row-level security isolates each organisation in Postgres. POS APIs are authenticated and rate-limited. Production deployments should enable email verification and webhook signing.