Privacy Policy
This summary explains how Didiserv handles personal and business information under POPIA while operating the compliance tracker, practitioner fulfilment layer and AI-assisted features.
What we collect
Didiserv collects the profile, company, tax, compliance, payment, and uploaded document information needed to build your compliance calendar and support selected top-up services.
Why we process it
We process information to authenticate users, track statutory obligations, prepare requested compliance work, communicate task progress, issue invoices, and keep records required by South African law.
AI-assisted features
Some public Didiserv guidance features use third-party artificial-intelligence services. The public AI lane is designed for general, non-sensitive questions: Didiserv detects obvious government identifiers, financial-account information, payment-card details, credentials, payroll records and personal financial records and replaces blocked visitor content before it is written to the durable public-chat transcript or sent to an AI model. Email addresses and South African phone numbers are removed from otherwise suitable model prompts where practical. Automated filters cannot identify every possible sensitive fact, so do not intentionally enter sensitive personal, tax, banking, payroll or financial-record information into the public AI chat. Use Didiserv secure document and human-review workflows when those records are required.
AI data minimisation and decisions
Didiserv configures its public AI control layer to minimise data sent to model providers and to request available retention and training restrictions. AI output is not used as the sole authority for canonical pricing, compliance status, evidence, filings or client-specific professional conclusions. Material tax and compliance positions are routed to appropriate human review or deterministic platform workflows.
Service providers
Didiserv may use regulated infrastructure and specialist processing providers, including AI-enabled services where appropriate to a requested workflow. The public AI chat is kept separate from document-level accounting and compliance processing; raw client records are not intentionally routed through the public AI lane.
Who can access it
Only authorised Didiserv staff, approved practitioners assigned to your task, and regulated infrastructure providers may access the information needed for their role. Unassigned practitioners do not receive your full client pack.
Retention
Compliance, tax, accounting, billing, and consent records may be retained where SARS, Companies Act, POPIA, or accounting-record duties require it. Data not subject to retention duties can be corrected, anonymised, or deleted on request.
Your rights
You may request access, correction, withdrawal of consent, anonymisation, or deletion where legally permitted by submitting a request through our contact page.