Legal
Privacy Policy
Last updated: 28 July 2026
LRX Tech Group (Pty) Ltd ("LRX Tech Group", "we", "us") operates LRX One (app.lrxone.com), our product suite comprising LRX One Hive (a business-to-business enterprise operating system) and LRX One Billing (subscription billing infrastructure). This policy explains what personal information we collect across both products, how we use it, who we share it with, and the rights you have over it, in accordance with South Africa's Protection of Personal Information Act 4 of 2013 ("POPIA").
1.Who we are
LRX One Hive and LRX One Billing are both B2B platforms — our direct customers are businesses ("tenants"), and the personal information we process belongs to those businesses' own employees and authorised users. Neither product is directed at, and neither knowingly collects information from, individual consumers or minors.
Information OfficerBrandon Le Roux
Deputy Information OfficerJessica Le Roux
Registered addressUnit 4 De Oude Akker 1, Reservoir Street, Brackenfell South, Cape Town, Western Cape, 7560, South Africa
2.Information we collect
We collect the following categories of personal information across LRX One Hive and LRX One Billing:
- Account and identity data — name, work email address, job title, and authentication credentials for each user your organisation invites to a product.
- Usage data — actions taken within a product (workflows created, documents uploaded, invoices issued, features used) needed to operate and improve the service.
- Content you provide — documents, workflow configurations, billing records, and other business data your organisation stores or processes through a product.
- Communications with AI-powered features — messages you send to LRX One Hive's AI Assistant, processed to generate responses.
- Billing information — processed on our behalf by our payment processors (see Section 4); we do not store full card numbers ourselves.
- Technical data — IP address, browser type, and device information, collected automatically for security and service-reliability purposes.
3.How we use it
We process personal information to:
- Provide, maintain, and secure LRX One Hive and LRX One Billing for your organisation.
- Authenticate users and enforce your organisation's access controls.
- Process payments and manage subscriptions.
- Respond to support requests and communicate service-related notices.
- Improve platform features, informed by aggregated usage patterns.
- Comply with our own legal obligations, including South African financial recordkeeping requirements.
4.Who we share it with
We share personal information only with third-party service providers ("operators", in POPIA terms) who process it on our behalf to deliver LRX One Hive and LRX One Billing, under contractual confidentiality and security obligations. We do not sell personal information.
| Processor | Purpose |
|---|---|
| Amazon Web Services (AWS South Africa & EU) | Cloud infrastructure and data storage |
| Anthropic | AI Assistant feature (LRX One Hive) — processes messages you send to it |
| Paystack | Payment processing (South Africa) |
| PayFast | Payment processing (South Africa) |
| Microsoft | Business email and productivity tools |
| Keycloak (self-hosted) | Authentication and identity management |
Our infrastructure is hosted in AWS South Africa and EU regions. Some processors listed above may process data outside these regions as part of their own service delivery; where that happens, we rely on contractual safeguards consistent with POPIA's cross-border transfer requirements.
5.Data retention
- Account and platform data is retained for 12 months after subscription cancellation, after which it is deleted unless you request earlier deletion (see Section 7).
- Financial records (invoices, payment records) are retained for 7 years, as required under South African tax and financial legislation (FICA).
6.Security
We apply technical and organisational measures appropriate to the sensitivity of the information we hold, including encryption in transit, access controls scoped to each tenant, and infrastructure hosted in a secured AWS environment. No system is completely immune to risk, and we continuously work to improve our safeguards.
7.Your rights
Under POPIA, you have the right to:
- Request access to the personal information we hold about you.
- Request correction of inaccurate or outdated information.
- Request deletion of your personal information, subject to our legal retention obligations (Section 5).
- Object to processing carried out on the basis of legitimate interest.
- Lodge a complaint with the Information Regulator of South Africa.
If you're an individual user of a tenant on LRX One Hive or LRX One Billing, requests about your own account data should generally go through your organisation's administrator first, since they control your account. Tenant administrators can submit a deletion request for their organisation's data directly through the relevant product's tenant deletion-request endpoint, or by contacting our Information Officer at brandon@lrxtechgroup.com.
8.Changes to this policy
We may update this policy from time to time. Material changes will be communicated to active tenants by email. The "Last updated" date at the top of this page always reflects the current version.
9.Contact us
Questions about this policy or how we handle personal information can be directed to our Information Officer, Brandon Le Roux, at brandon@lrxtechgroup.com.