Privacy Policy

Pixel Penguin is a software development studio operating from Swakopmund, Namibia. We are the party responsible for the personal information described in this policy — the "data controller", in the language of data protection law.

Where we build and host software on behalf of a client, that client is the controller of the data inside their application and we act as a data processor on their instructions. In those cases, the client's own privacy policy governs how that data is used.

We only collect information you give us directly, plus the minimum technical data our servers need to function securely.

We do not ask for, and would prefer you did not send us, special categories of personal information such as health data, biometric data, or government identity numbers, unless it is strictly necessary for a service you have engaged us to provide.

We use personal information for the following purposes, and no others:

• Responding to you. To read, reply to, and keep a record of your support enquiries and project questions.
• Providing the Services. To create and operate your account and workspace, deliver the features you subscribe to, and keep your data available to you.
• Billing. To issue invoices, take payment, and maintain the financial records we are required by Namibian law to keep.
• Service communication. To send transactional email such as ticket confirmations, password resets, invoices, and notices of material changes to our terms or pricing — and, where you have opted in, the same kind of notification over WhatsApp.
• Security and abuse prevention. To rate limit form submissions, block spam and automated attacks, and investigate suspicious activity.
• Improving our software. To diagnose errors and fix defects, using logs and error reports.

We rely on the performance of our contract with you, our legitimate interest in operating and securing our business, and our legal obligations as the basis for this processing. Where we rely on your consent — for example, an optional newsletter — you may withdraw it at any time.

We do not sell, rent, or trade personal information, and we do not use your data or your Customer Data to train AI models.

This website uses strictly necessary cookies only. We run no advertising pixels, no analytics suites, and no cross-site tracking, which is why you are not being asked to dismiss a cookie banner.

• laravel_session — keeps your session state, such as which support ticket you are allowed to view. Expires when your session ends.
• XSRF-TOKEN — protects forms against cross-site request forgery.
• remember_web_* — set only if you choose "remember me" when signing in to an account.

Your light/dark theme preference is stored in your browser's local storage and never leaves your device. Blocking these cookies in your browser is possible, but sign-in and form submission will stop working.

We share personal information only with the service providers needed to run our infrastructure. Each is bound by its own data processing terms, and each receives only the data necessary for its function.

Beyond these providers, we will disclose personal information only where we are legally compelled to do so by a valid order of a Namibian court or competent authority, or where disclosure is necessary to protect our rights, our users, or the security of our systems.

Lekker Accounting and LekkerFlow include AI features powered by third-party large language models. When you use one of these features — scanning a receipt, drafting an invoice, or submitting a natural-language progress update — the relevant content is transmitted to our AI provider for processing and the result is returned to your workspace.

We use these providers under agreements that prohibit the use of submitted content for training their models, and content is not retained by the provider beyond the short window needed for abuse monitoring. AI features are only invoked by an explicit action on your part; we do not send your data to an AI provider in the background.

Every AI action is logged against your workspace's credit history so that you can see exactly what was processed and when.

We use the WhatsApp Business Platform (Meta's Cloud API) to send notifications to people who have asked to receive them. This section explains exactly how that works, because messaging someone on WhatsApp is more personal than sending an email and we think it deserves its own explanation.

We only send, we do not listen

Our WhatsApp integration is outbound only. We send pre-approved template messages and we do not operate WhatsApp as an inbound support channel. Replies sent to our WhatsApp number are not monitored, routed to a human, or acted upon — with the exception of opt-out keywords described below. If you need to reach us, please use our support desk or email gerrit@pixel-penguin.com.

What we send

• Support updates — confirmation that we received your ticket, and notice when we have replied to it.
• Lekker Accounting — invoices, quotes, and payment reminders sent by a workspace to its own clients.
• LekkerFlow — check-in prompts, ticket assignments, and sprint notifications sent to members of a workspace.
• Client projects — notifications sent by applications we build and operate on behalf of our clients.

We do not send marketing, promotional broadcasts, or unrelated advertising over WhatsApp.

Consent comes first

We send WhatsApp messages only to numbers that have given prior express opt-in. Consent is captured either when you supply your number and tick the WhatsApp option on one of our forms, or when a workspace enables WhatsApp delivery for a contact who has agreed to it. We record the date and source of every opt-in.

Where a workspace uses our software to message its own clients, that workspace is the data controller and is responsible for obtaining and evidencing consent from the people it messages. In that arrangement we act only as a processor, sending on the workspace's instruction. The same applies to WhatsApp integrations we build and run for client projects.

Opting out

You can stop WhatsApp messages at any time by replying STOP to any message, by turning WhatsApp delivery off in your workspace notification settings, or by emailing us. Opt-outs are actioned immediately and always within 72 hours. We keep a record of your opt-out — a suppression entry containing your number — for the sole purpose of making sure we do not message you again. Opting out of WhatsApp does not affect essential email such as invoices or security notices.

What we store

For each WhatsApp notification we retain the recipient's phone number, the message template used and the values inserted into it, the timestamp, the delivery status reported back by Meta (sent, delivered, read, or failed), and the opt-in record. We store this so that we can prove a message was delivered, diagnose failures, and honour your consent choices. We do not store the contents of inbound messages, because we do not process them.

Meta's role

Messages are transmitted through Meta Platforms, Inc., which operates the WhatsApp Business Platform and processes your phone number and message content in order to deliver it. Meta's handling of that data is governed by the WhatsApp Privacy Policy and the WhatsApp Business Data Processing Terms, and involves transfer of data outside Namibia. Using WhatsApp to receive our notifications means Meta's terms apply to you in addition to this policy.

What we will never do

We will never sell or rent phone numbers, share them with advertisers or data brokers, upload them to advertising audiences on any platform, use them to train AI models, or pass them to another customer of ours. Phone numbers collected for WhatsApp delivery are used for that purpose and no other.

We keep personal information only for as long as it serves the purpose it was collected for.

• Support tickets are retained for twenty-four (24) months after the ticket is closed, so that we have context if you come back to us about the same issue.
• Account and Customer Data is retained for the life of your subscription. Following cancellation it is kept for ninety (90) days — during which you can still export it — and then permanently deleted from our production systems. Backups are purged within a further thirty (30) days.
• Billing records are retained for five (5) years, as required by Namibian tax and company law.
• WhatsApp delivery logs — the number messaged, the template used, and its delivery status — are retained for twelve (12) months.
• WhatsApp opt-out records are kept indefinitely. This is the one record we deliberately do not delete, because it is what stops us from messaging you again.
• Server and error logs are retained for thirty (30) days.

All traffic to our websites and applications is encrypted in transit using TLS. Passwords are stored as salted hashes and are never recoverable in plain text, by us or anyone else. Two-factor authentication is available on all accounts and we recommend enabling it.

Each Lekker Accounting workspace runs against an isolated database, so one customer's data cannot be reached from another's. Administrative access to production systems is restricted to authorised personnel and protected by multi-factor authentication.

No system is perfectly secure. If a breach occurs that is likely to affect your rights, we will notify affected users and any relevant authority without undue delay, and tell you plainly what happened and what we are doing about it.

Whatever jurisdiction you are in, we extend the following rights to everyone we hold data about:

• Access — ask for a copy of the personal information we hold about you.
• Correction — have inaccurate or incomplete information fixed.
• Deletion — ask us to erase your information, subject to records we are legally required to keep.
• Portability — export your data in a standard format such as CSV, PDF, or Excel.
• Objection and restriction — object to processing based on our legitimate interests, or ask us to pause processing while a dispute is resolved.
• Withdrawal of consent — withdraw consent at any time where our processing relies on it.

Account holders can exercise most of these directly from workspace settings, including deleting their account. Otherwise, email us at gerrit@pixel-penguin.com and we will respond within thirty (30) days. We do not charge for this, and we will never penalise you for exercising these rights.

We operate from Namibia and serve clients across Southern Africa, but some of our service providers process data outside the region, including in the European Union and the United States. Where personal information is transferred across borders, we rely on the provider's standard contractual clauses or equivalent safeguards to ensure it remains protected to the standard described in this policy.

If you are in the European Economic Area or the United Kingdom, the GDPR rights described in section 10 apply to you. If you are in South Africa, we handle your information consistently with the Protection of Personal Information Act (POPIA).

Our services are built for businesses and are not directed at children. We do not knowingly collect personal information from anyone under the age of 18. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this policy as our services evolve or as the law changes. The "last updated" date at the top of this page always reflects the current version. Where a change materially affects how we handle your personal information, we will notify active account holders by email at least thirty (30) days before it takes effect.

For any privacy question, data request, or complaint, contact:

If you are not satisfied with how we have handled your request, you have the right to lodge a complaint with the data protection authority in your country.