Security & your data

Encryption

Your documents are encrypted at rest and in transit. All traffic between your browser and Gatvol uses TLS.

Isolation

Every matter, document, and draft is scoped to the user that created it. Database row-level security policies enforce per-user isolation at the data layer — there is no cross-user access.

POPIA compliance

Gatvol complies with the Protection of Personal Information Act, 2013. We process personal information on a lawful basis, practise data minimisation, and respect your right to access, correction, and deletion. Our Information Officer is Xolane Don Ndlovu.

Retention & deletion

You can delete individual matters or your entire account at any time from Settings → Account. Deletion is permanent — once you delete a matter or your account, the underlying documents, analyses, and drafts are removed and cannot be recovered.

AI processing

Documents you upload are processed by Claude (Anthropic) and embedding models under data-processing terms. Your data is not used to train these models.

Contact for data requests

For POPIA access, correction, or deletion requests, email support@gatvol.co.za.