Privacy Policy & Data Protection Notice

1. Data Controller & Contact Details

Governx (Pty) Ltd operates as the designated Data Controller under EU GDPR Article 4(7) for users on xdew.online.

2. Data Residency & Cloud Infrastructure

All customer data, electronic invoices, nominal ledgers, and audit logs are hosted in the Microsoft Azure North Europe (Dublin, Ireland) hyperscaler region, strictly within the European Union / European Economic Area (EEA).

We implement end-to-end TLS 1.3 encryption in transit, AES-256 encryption at rest, and zero-trust cryptographic key isolation.

3. Information We Process & Lawful Basis (GDPR Art. 6)

We process personal and corporate data exclusively under the following lawful bases:

• Account & Identity: Legal representative name, business email, and account credentials (contractual necessity - Art. 6(1)(b)).
• Corporate & Tax Data: Company registration, EU VAT number / VIES registration, and tax address for Peppol BIS 3.0 e-invoicing compliance (legal obligation - Art. 6(1)(c)).
• Accounting & Ledger Data: Invoices, debit/credit entries, bank transaction feeds, and financial statements (legal accounting obligation).
• Payment Processing: Handled securely by our authorized Merchant of Record, Paddle.com (PCI-DSS Level 1 certified). We do not store raw credit card numbers.

4. Statutory Retention Periods

Pursuant to European and national commercial codes and Council Directive 2006/112/EC, statutory accounting records, Peppol XML invoices, and transaction logs are preserved for a period of 6 to 10 years depending on the applicable European jurisdiction.

5. Your GDPR Data Subject Rights (Articles 15–22)

As a data subject in the European Union / EEA, you hold statutory rights to:

• Right of Access (Art. 15): Obtain confirmation and copy of your personal data.
• Right to Rectification (Art. 16): Correct inaccurate or incomplete corporate data.
• Right to Erasure (Art. 17): Request deletion of data, subject to statutory accounting retention laws.
• Right to Data Portability (Art. 20): Export your full General Ledger and invoice data in machine-readable JSON/CSV/XML format.
• Exercise Rights: Contact our team directly at support@governx.co.za.