The VIRO Financial Dashboard is operated by Afflatus (PTY) Ltd, a company registered in South Africa. If you have any questions about this policy, contact us at info@ashsa.co.za.
We collect and process the following data in order to operate the dashboard:
We do not collect personal information beyond what is necessary to operate the financial reporting features of the dashboard.
Data collected is used exclusively for:
We do not sell, share, or use your financial data for any purpose other than operating the dashboard for the connected organisation.
All data is stored in a Cloudflare D1 database hosted on Cloudflare's infrastructure. Cloudflare's data centres comply with international data protection standards. Data is not transferred to any third parties other than Xero (for the purpose of syncing actuals) and Cloudflare (for hosting and storage).
This dashboard connects to Xero via the Xero OAuth 2.0 API. By connecting your Xero organisation you authorise the dashboard to read financial data from your Xero account. You can disconnect the dashboard from Xero at any time via the Admin panel or directly through your Xero Connected Apps settings.
Financial data and sync records are retained for the duration of the active subscription or service agreement. On termination, data can be exported or deleted upon request.
In accordance with the Protection of Personal Information Act (POPIA), you have the right to:
To exercise any of these rights, contact us at info@ashsa.co.za.
We take reasonable technical and organisational measures to protect your data, including encrypted storage of Xero OAuth tokens, HTTPS-only access, and admin authentication controls on all sensitive endpoints.
We may update this privacy policy from time to time. Material changes will be communicated to affected users. The effective date at the top of this page will reflect the most recent update.
For any privacy-related queries, contact:
Afflatus (PTY) Ltd
info@ashsa.co.za