Legal

Privacy policy

Last updated 24 September 2026

Who is responsible

OrangeReturns is the responsible party for personal information collected through this service, in terms of the Protection of Personal Information Act 4 of 2013 (POPIA). Contact us at hi@orangecascade.tech.

What we collect

Depending on how you use OrangeReturns, we collect:

• your name, email address and account details,
• the tax year and the answers you give about your income, expenses and circumstances,
• documents you upload, such as an IRP5, medical certificate or other supporting records,
• the practitioner you choose, messages about the return, and your written approval,
• payment status and a payment reference. Card details are collected by Paystack, not stored by OrangeReturns, and
• if you are a practitioner, your registration details, controlling body, bank account for payouts, fee settings and profile picture.

Document analysis

If you allow it when you pay, OrangeReturns uses automated analysis, including AI, to read the documents you upload and suggest figures for your tax return. That analysis is only for completing the return. It does not file anything with SARS. Your practitioner reviews the return, and you approve it in writing before it is filed. If you do not give this permission, we do not run that analysis.

Why we use it

We use this information to:

• create and secure your account,
• build your document checklist and show your return’s progress,
• introduce you to a practitioner and let them prepare the return,
• take payment, hold the fee until filing, and pay the practitioner,
• keep a record of approval and of the filing, and
• protect the service against misuse.

The legal bases are your request to use the service, the contract with you or your practitioner, our legitimate interest in running a secure workspace, and obligations under tax and financial-services rules where they apply.

Who we share it with

We share personal information only as needed to provide the service:

• the practitioner you choose, so they can prepare and, after your approval, file the return,
• Paystack, to process the payment in rand,
• Clerk, to sign you in,
• our hosting and email providers, to run the product and send service messages, and
• SARS, when your practitioner files the approved return.

We do not sell personal information. Some of these providers process information outside South Africa. Where they do, we rely on their contractual safeguards and on POPIA’s rules for cross-border transfers.

How long we keep it

We keep return records for as long as we need them to provide the service, to resolve a dispute, and to meet record-keeping duties that apply to tax matters. You can ask us to delete your account information when we no longer need to keep it. Documents already shared with your practitioner, or filed with SARS, may still be retained by them under their own duties.

Cookies

OrangeReturns uses cookies and similar storage so you can stay signed in and so the product can remember your session. These are necessary for the service. We do not use them to sell advertising.

Your rights

You may ask us for access to the personal information we hold, ask us to correct it, ask us to delete it where the law allows, or object to certain processing. Email hi@orangecascade.tech. You may also lodge a complaint with the Information Regulator at inforegulator.org.za or inforeg@justice.gov.za.

How the service itself works is described in the terms.