02 / 11 —Status
This document is a draft under legal review and is not yet binding. The final version will replace it here.
03 / 11 —1
For material uploaded into a workspace (documents, forensic images, and the personal information they contain), the subscribing firm is the responsible party and Klarity (Octio (Pty) Ltd) acts as its operator under the Protection of Personal Information Act, 2013. For account and usage information described in section 2, Klarity is the responsible party.
04 / 11 —2
Account information — name, email address, password hash, workspace
memberships, roles.
Customer Data — documents and forensic material uploaded by the firm.
Evidence material may contain any category of personal information,
including special personal information; it is processed only on the firm's
instruction and is never used for any other purpose.
Usage information — product analytics (only with your consent, which
you can withdraw at any time in Account settings), security and audit logs,
and support correspondence.
05 / 11 —3
To provide and secure the service; to maintain chain-of-custody and audit records; to communicate service messages (invitations, password resets, production deliveries); and, with consent, to understand product usage.
06 / 11 —4
Primary storage and processing is in the AWS Africa (Cape Town) region (af-south-1) — inside South Africa. Sub-operators: Amazon Web Services (hosting), PostHog (product analytics, consent-gated), Google Workspace (support mailbox).
07 / 11 —5
Customer Data is retained under the firm's control and deleted when the firm deletes it or the engagement terminates (subject to a reasonable wind-down period). Audit and custody records are retained for as long as the related workspace exists. Password-reset tokens expire after one hour; invitations after seven days.
08 / 11 —6
Per-tenant storage isolation, encryption in transit and at rest, role-based access control, session revocation on password reset, and audited operator access.
09 / 11 —7
You may request access to, correction of, or deletion of your personal information, and may object to processing, by contacting our Information Officer at support@getklarity.co.za. If unresolved, you may lodge a complaint with the Information Regulator (South Africa).
10 / 11 —8
Material changes to this policy take effect when you accept the revised version, which the application will request on next sign-in.
11 / 11 —9
Information Officer — support@getklarity.co.za