Privacy Policy

Effective Date: 01/06/2025

Company: WizardTech ("we", "our", or"us")

Product: © Bifröst. ("the Platform" or"the Service")

1. Introduction

We respect your privacy and are committed to protecting personal information in compliance with theProtection of Personal Information Act, 2013 (POPIA). This Privacy Policy explains how we collect, use, store, and protect personal and special personal information of users and their clients when using our Platform.

2. Scope

This Privacy Policy applies to all users of the Platform, including audit firms, their employees, and their clients who upload or provide data through the Platform.

3. Definitions

“Personal Information” means information that can identify a natural or juristic person, as defined under POPIA.“Special Personal Information” includes financial information, identification numbers, and other sensitive data related to individuals or entities.

4. Information We Collect

• Account information: firm name, contact person, email address, phone number.
• User information: names, job titles, login credentials.
• Client data: uploaded files, supporting documents, financial statements, and other materials provided by clients.
• Technical data: browser type, IP address, usage logs, and cookies.

5. How We Use Information

We process personal and special personal information for lawful purposes, including:

• Providing, maintaining, and improving the Platform.
• Managing accounts, authentication, and user support.
• Facilitating audit data requests and tracking open items.
• Complying with legal and regulatory obligations.
• Communicating updates, maintenance notices, and policy changes.

6. Legal Basis for Processing

• Consent of the data subject.
• Contractual necessity to deliver the Service.
• Legal obligations applicable to you or us.
• Legitimate interests pursued by us or our clients.

7. Data Storage and Security

We use secure cloud-based hosting providers located within or outside South Africa. All data is encrypted in transit and at rest using industry-standard encryption protocols. Access controls, audit logs, and authentication measures protect information from unauthorised access, alteration, or disclosure.

8. Data Retention

We retain personal and client data only for as long as necessary to fulfil the purposes outlined in this Policy or as required by law. Retention periods vary depending on the selected subscription plan and applicable audit regulations.

9. Cross-Border Transfers

If we transfer data outside South Africa, we ensure that the receiving country or organisation provides an adequate level of protection as required by POPIA.

10. Sharing of Information

We do not sell or rent personal information. We may share limited data with:

• Cloud hosting and infrastructure providers.
• Payment processors for subscription billing.
• Legal or regulatory authorities, if required by law.
• Third-party integration partners (e.g., accounting software) — only with consent.

11. Data Subject Rights

Under POPIA, you have the right to:

• Access, correct, or delete your personal information.
• Object to or restrict processing of your information.
• Withdraw previously given consent.
• Lodge a complaint with the Information Regulator (South Africa) viacomplaints.IR@justice.gov.za.

12. Cookies and Tracking

We use cookies and similar tracking technologies to improve user experience and analyse platform usage. Users can control cookie settings through browser preferences. Additional details are provided in our

Cookie Policy.

13. Breach Notification

In the event of a data breach that compromises personal information, we will notify affected users and the Information Regulator in accordance with POPIA requirements — without undue delay.

14. Changes to This Policy

We may update this Privacy Policy periodically. All updates will be posted on our website or platform, and material changes will be communicated via email.

15. Contact Information

For questions, requests, or privacy-related concerns, please contact:

Email: support@wizardtech.tech