POPIA Notice: This Privacy Policy is issued in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). Generator Software Holdings (Pty) Ltd is the Responsible Party in terms of POPIA. Our designated Information Officer can be contacted at hello@loanbooq.com.
This Privacy Policy explains how Generator Software Holdings (Pty) Ltd ("we", "us", or "our"), registration number 2025/826175/07, collects, uses, stores, and protects your personal information when you use Loanbooq ("Service").
By using the Service, you consent to the collection and processing of your personal information as described in this policy.
Responsible Party (POPIA):
Generator Software Holdings (Pty) Ltd
Registration number: 2025/826175/07
Address: 1st Floor, Constantia Village Courtyard, Cape Town, 7806
Email: hello@loanbooq.com
Information Officer:
Name: David Atherstone
Email: hello@loanbooq.com
Our Information Officer has been designated and registered with the Information Regulator of South Africa in accordance with section 55 of POPIA.
Information about our customers' borrowers and clients: Loanbooq also holds personal information about people our customers lend to or act for, such as names in Xero loan accounts and in loan documents. For that information our customer is the responsible party and we are their operator under POPIA: we process it only on their behalf and on the terms in clause 10 of our Terms of Service. If you are one of those people and want to see, correct or delete your information, please contact the lender or adviser concerned; we will help them answer you.
When you connect your Xero account, we access and process the following data from your Xero organisation solely to provide the Service:
We do not access payroll, employee records, invoices, or any Xero data beyond what is necessary for the Service.
We process your personal information for the following purposes, as required by section 13 of POPIA:
We process your personal information on the following grounds:
5.1 Your data is stored on secure servers hosted by xneelo (Pty) Ltd in a data centre in Johannesburg, South Africa. We implement the following security measures:
5.2 While we take all reasonable steps to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
5.3 If we have reasonable grounds to believe that personal information we hold has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and the people affected as section 22 of POPIA requires. Where we hold the information as a customer's operator, we will tell that customer immediately so that they can do the same.
We retain your personal information for the following periods:
After account termination, your data is retained for 90 days before deletion, unless we are required by law to retain it for longer.
We do not sell your personal information. We share it only in the following circumstances:
We share information with trusted third-party service providers who process data on our behalf:
All service providers are required to process your data only as instructed by us and in accordance with applicable data protection laws.
We may disclose your information where required by South African law, court order, or lawful request by a government authority.
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before such a transfer occurs.
Some of our service providers may process your data outside South Africa: Sentry (error reports) and Resend (email delivery) are based in the United States, and Paystack may process payment information outside South Africa. Loan documents and your loan data are stored in South Africa. Where we transfer personal information across South African borders, we do so in accordance with section 72 of POPIA, ensuring that the recipient country provides an adequate level of protection or that appropriate safeguards are in place.
As a data subject under POPIA, you have the following rights:
To exercise any of these rights, contact us at hello@loanbooq.com. We will respond within 30 days.
The Service uses session cookies to maintain your logged-in state. These are strictly necessary for the Service to function and do not track you across other websites. We do not use advertising or analytics cookies.
The Service is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
We may update this Privacy Policy from time to time. Material changes will be notified by email or by a prominent notice within the Service at least 30 days before taking effect. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
For any privacy concerns or to exercise your rights, contact our Information Officer:
If you are not satisfied with our response, you may lodge a complaint with the Information Regulator of South Africa: