Privacy Policy
Last updated: 2026-10-30
1. What this covers
Butha is business software: the businesses using it enter information about themselves and their own customers to create invoices. This policy explains what Butha (the platform) collects and how it's used, both for the business account holder and, where applicable, the customers they invoice.
2. Information we collect
Account information (name, email, password) when you sign up; business information (business name, address, tax details, logo, bank details) you enter in Settings; customer and invoice information you enter to run your business, name, email, billing address, invoice line items, and amounts; payment information processed by our payment provider (Paystack), Butha does not store full card details; and basic product-usage analytics (which features are used, not the content of your invoices), see below.
3. How we use it
To provide the invoicing service itself: generating invoices and receipts, sending emails on your behalf via our transactional email provider (Resend), processing payments via our payment provider (Paystack), and operating your account (billing, support). We use limited, first-party product analytics (which pages and actions are used, when a milestone like "first invoice sent" happens) to understand how Butha is used and improve it. We do not store invoice line-item descriptions or full financial detail in analytics, and we do not sell personal information to third parties.
4. Who your data is shared with
Only the service providers necessary to run Butha: Supabase (database and authentication hosting), Resend (transactional email delivery), Paystack (payment processing), and our hosting provider (Netlify). Each processes data under its own privacy and security terms. We don't share your business or customer data with unrelated third parties.
5. Your customers' information
If you're a business using Butha, you're responsible for having a lawful basis to collect and process your own customers' personal information (name, email, billing address) that you enter into Butha to invoice them, Butha acts as your processor for that data, not as an independent controller of it.
6. Data retention
We retain financial records (invoices, payments, receipts) for as long as your account is active, and for a reasonable period after closure, as required for legitimate accounting, tax, and legal purposes. You can request deletion of your account, see our approach to account closure in Settings.
7. Your rights
Under POPIA and comparable data-protection principles, you can request access to, correction of, or deletion of your personal information, subject to our legitimate need to retain financial records as described above. Contact us at the address below.
8. Security
We use industry-standard practices: encrypted connections (HTTPS), database-level access controls (row-level security scoping every business's data to that business), and secrets kept server-only, never exposed to the browser.
9. Contact
Questions about this policy, or a request regarding your personal information: mokgere@catalyzenow.co.