Last updated: 2026/04/19
1. Introduction
This Privacy Policy explains how CapFlow and TAGPROJECTS handle personal information in connection with the CapFlow platform.
CapFlow is a multi-tenant software platform used by companies (referred to as “Tenants”) to manage equity, shareholders, and related corporate operations. CapFlow is developed and provided by TAGPROJECTS.
This policy explains:
- What data is collected
- Who controls it
- How it is used
- Your rights regarding your personal information
By using CapFlow, you acknowledge the terms described in this Privacy Policy.
2. Roles and Responsibilities (Data Controller & Processor)
The Tenant company (the organisation that licenses or rents CapFlow) is the Data Controller for all shareholder, transactional, and operational data entered into the platform.
This includes:
- Shareholder records
- Equity allocations
- Transactions
- Company-specific operational data
TAGPROJECTS acts solely as a software provider and Data Processor (or service provider).
TAGPROJECTS does not determine the purpose or use of Tenant data.
Each Tenant is responsible for:
- Ensuring lawful processing of personal data
- Informing their shareholders and users
- Complying with applicable data protection laws (including POPIA and/or GDPR where applicable)
3. Data Hosting and Infrastructure
Each Tenant is responsible for the hosting environment of their CapFlow instance, either directly or via their chosen infrastructure provider.
TAGPROJECTS:
- Does not access Tenant operational or shareholder data except where explicitly required for technical support
- Does not store or use Tenant business data for its own purposes
- Maintains only minimal system-level logs required for platform stability and security
4. Personal Data We Collect
4.1 Data collected by the Tenant (via CapFlow)
Depending on how the Tenant uses the platform, personal data may include:
- Full name
- Email address
- Phone number
- Identity or registration numbers (where provided)
- Shareholding details
- Financial or equity allocation data
- Login credentials and user roles
This data is controlled entirely by the Tenant.
4.2 Data collected by TAGPROJECTS
TAGPROJECTS may collect limited information necessary for:
Platform operation and support:
- Account contact details (e.g. admin email)
- Support communication records
- Technical logs (errors, performance data)
Usage and analytics (non-sensitive):
- Feature usage statistics
- System performance metrics
- Device/browser information (for compatibility)
TAGPROJECTS does not access or process shareholder or transactional data.
5. How Data Is Used
5.1 Tenant usage
Tenant-controlled data is used to:
- Manage shareholders and equity structures
- Process internal company operations
- Generate reports and records
5.2 TAGPROJECTS usage
TAGPROJECTS uses limited data strictly for:
- Providing technical support
- Improving system performance and reliability
- Maintaining platform security
- Ensuring service availability
TAGPROJECTS does not sell or use personal data for advertising purposes.
6. Legal Basis for Processing
Depending on jurisdiction, personal data is processed under one or more of the following legal bases:
- Performance of a contract (providing CapFlow services)
- Legal obligation (compliance with applicable laws)
- Legitimate interest (platform security, improvement, and support)
- Consent (where explicitly required by the Tenant or user)
7. Data Sharing and Third Parties
TAGPROJECTS does not sell personal data.
Data may only be shared in limited cases:
- With infrastructure providers (for hosting or system operation)
- With support or monitoring tools used to maintain platform stability
- When legally required by law or regulatory authorities
All third-party service providers are required to maintain appropriate data protection standards.
8. Data Security
We implement appropriate technical and organisational security measures, including:
- Encrypted data transmission (HTTPS/TLS)
- Access control and authentication mechanisms
- Role-based permissions within the platform
- Audit logging for administrative actions
- Isolation of Tenant environments (multi-tenant separation)
Despite these measures, no system is completely secure, and absolute security cannot be guaranteed.
9. Data Retention
- Tenant data is retained and managed by the Tenant according to their own policies.
- TAGPROJECTS retains only minimal operational and support data.
- Support and technical logs are retained only for as long as necessary for system maintenance, troubleshooting, or legal compliance, after which they are securely deleted or anonymised.
10. Your Rights
Depending on applicable law (including POPIA), you may have the following rights regarding your personal data:
- Right to access your personal information (via the Tenant)
- Right to correction or updating of inaccurate data
- Right to deletion (subject to legal obligations)
- Right to object to processing
- Right to data portability (where applicable)
For CapFlow operational data, these rights must be exercised directly with the Tenant company.
For data held by TAGPROJECTS (limited support/technical data), you may contact TAGPROJECTS directly.
11. Cookies and Tracking
CapFlow may use cookies and similar technologies to:
- Maintain user sessions
- Improve platform performance
- Analyse system usage patterns
Users may manage cookie preferences through their browser settings where applicable.
12. International Data Transfers
Where data is processed or stored outside the user’s country, appropriate safeguards are implemented to ensure data protection standards are maintained in accordance with applicable law.
13. Data Breach Notification
In the event of a data breach affecting personal information:
- Affected Tenants will be notified without undue delay
- Where legally required, affected individuals will be informed
- Appropriate remedial and mitigation measures will be taken immediately
14. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last updated” date.
Continued use of CapFlow after changes indicates acceptance of the updated policy.
15. Contact Information
TAGPROJECTS
Website: www.tagprojects.co.za
Email: info@tagprojects.co.za
Phone: +27 63 485 3489
For data-related requests concerning shareholder or operational data, please contact the relevant Tenant company directly.