Skip to content
Features Pricing Compare
Log in Start free

Privacy Policy

Last Updated: 30 June 2026

Introduction

Palto is a billing and client-communication platform for service businesses. With Palto you create and send invoices, schedule jobs and appointments, message clients on WhatsApp, and bill on a recurring basis — with a lot less admin.

This Privacy Policy explains how Palto collects, uses, shares, and protects your personal information when you use the Palto website and software (the "Service"). It is written to comply with the Protection of Personal Information Act, 2013 (POPIA) of South Africa.

In this policy, "Palto", "we", "us", and "our" refer to Digivet Systems (PTY) LTD, the company that operates the Palto Service. "You" refers to the business and the people who use the Service.

By using Palto, you agree to the collection and use of personal information in accordance with this policy.

1. Who We Are (Responsible Party)

Palto is operated by:

Digivet Systems (PTY) LTD Operating as: Palto Email: [email protected]

Digivet Systems (PTY) LTD is the responsible party (sometimes called the data controller) for the personal information you provide to us about your account and your business. We are the operator (data processor) for the personal information you load into the Service about your own clients — you remain the responsible party for that data.

2. Information Officer / How to Contact Us

POPIA requires us to make an information officer reachable for privacy questions, requests, and complaints. You can reach our information officer by email at:

[email protected]

Please use this address for any request to access, correct, or delete personal information, to object to processing, or to raise a privacy concern. We aim to respond to all reasonable requests within a reasonable time.

3. Personal Information We Collect

3.1 Information You Provide About Your Business and Account

  • Your name, email address, and a password
  • Your business or trading name and contact details
  • Team member names and email addresses
  • Billing details and payment-card information (handled by our payment processor — see section 5)

3.2 Information You Load About Your Clients

When you use Palto to invoice and communicate with the people you serve, you may enter:

  • Client names, email addresses, phone numbers, and physical or postal addresses
  • The items, services, and amounts you bill
  • Invoice, quote, and payment history
  • Messages and notes you exchange with clients
  • Any other information you choose to record about a client or a job

You control this data. You are responsible for having a lawful basis to load and process it, and for telling your own clients how their information is used. We process it only to provide the Service to you.

3.3 Information We Collect Automatically

  • IP address, browser type, and device information
  • Pages and features used, and the actions you take
  • Access times and the page that referred you

4. How We Use Personal Information

We use personal information to:

  • Provide, operate, and maintain the Service (creating and sending invoices, scheduling, messaging, and recurring billing)
  • Process subscription payments and manage your account
  • Send service-related messages (for example, invoice delivery confirmations, billing notices, and security alerts)
  • Provide customer support and respond to your requests
  • Keep the Service secure and prevent fraud or abuse
  • Comply with our legal and regulatory obligations
  • Improve the Service

We do not sell your personal information.

5. Sub-Processors and Third Parties

To run the Service we share limited personal information with carefully chosen service providers who process it on our behalf. Each is bound to use the information only to provide their service to us:

  • WhatsApp / Meta — to deliver the messages and invoice links you send to your clients through WhatsApp.
  • Peach Payments — to process subscription and card payments securely. Card details are handled by Peach Payments; we do not store full card numbers.
  • First National Bank (FNB) — for electronic funds transfer (EFT) and banking-related processing of payments.
  • Amazon Web Services (AWS) — for secure cloud hosting and storage of the Service and its data.

We may add or change sub-processors as the Service evolves. Where the law requires it, we will keep this list current and process personal information only under appropriate safeguards.

6. Your Rights Under POPIA

Subject to the conditions in POPIA, you have the right to:

  • Access the personal information we hold about you
  • Correct information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or unlawfully obtained
  • Delete or destroy personal information in certain circumstances
  • Object to the processing of your personal information on reasonable grounds
  • Withdraw consent where our processing relies on your consent
  • Complain to us, and to lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, email [email protected]. We may need to verify your identity before acting on a request.

You may contact the Information Regulator (South Africa) at the contact details published on its website.

7. Retention of Personal Information

We keep personal information only for as long as it is needed to provide the Service to you and to meet our legal, accounting, and reporting obligations. When information is no longer needed, we delete or anonymise it. If you close your account, we will delete or anonymise your data within a reasonable period, except where we are required to retain it by law.

8. Security

We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, and misuse. These include encryption in transit, access controls, and hosting on reputable infrastructure (AWS). No system is perfectly secure, but we work to keep your information safe and to address any incident promptly.

9. Cookies

At launch, Palto uses essential cookies only — the cookies strictly necessary to sign you in, keep you signed in, and operate core features securely. We do not use advertising cookies. Analytics and any non-essential cookies are deferred; if we introduce them in future, we will update this policy and, where required, ask for your consent.

10. International Processing

Some of our service providers (for example, certain WhatsApp/Meta and AWS infrastructure) may process information outside South Africa. Where personal information is transferred across borders, we take steps to ensure it receives an adequate level of protection as required by POPIA.

11. Children

The Service is intended for businesses and is not directed at children. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date above and, where appropriate, notify you through the Service.

13. Governing Law

This Privacy Policy is governed by the laws of the Republic of South Africa, and any dispute relating to it is subject to South African jurisdiction.

14. Contact Us

For any privacy question or request, contact us at:

Digivet Systems (PTY) LTD (operating as Palto) Email: [email protected]