Your numbers stay yours, and they stay in South Africa.
LitreIQ reads sensitive business information: sales, card settlements, bank statements and sometimes staff records. Here is, in plain language, how we look after it.
Where your data is kept
LitreIQ runs on our own infrastructure in South Africa, in the Amazon Web Services Cape Town region (af-south-1). Your business data, your connection details, the information we sync from your systems and our logs about your account are all stored there.
- We do not use offshore integration platforms to move your data.
- We do not keep your connection passwords or keys in an offshore secrets service.
- We do not send your business data to offshore analytics or tracking services.
When you connect a system that is itself run by an international vendor (for example an accounting or e-mail service), that vendor only receives what its own service needs to let you connect. The data LitreIQ reads back is stored in South Africa.
Encryption
- In transit: all traffic between you, your systems and LitreIQ is encrypted with TLS, the same standard your bank's website uses.
- At rest: stored data and backups are encrypted.
- Connection secrets: the passwords, keys and access tokens that let LitreIQ connect to your systems are encrypted separately for each business. Each business has its own encryption key, and that key is itself locked by a master key held in the Cape Town region. This is known as envelope encryption. Secrets are only unlocked inside the background process that fetches your data. They are never shown in a browser and never written to logs.
Who can see what
- Each business's data is kept separate from every other business's data, and the database enforces that separation.
- Inside your business, you decide who has access and at what level. Only an owner or administrator can connect a new system or switch on any action that changes something.
- Important actions are recorded in an audit log: who connected what, who changed access, who opened or closed a case. You can export your audit log.
- LitreIQ staff access to client data is limited to what is needed to support you, and is logged. [VERIFY]
Read-only first
LitreIQ starts by reading. It reads the back office reports, card terminal exports, bank statements and fleet settlement files you already receive. Any action that would write something back to another system is switched off by default, and has to be switched on by your own administrator for each connection.
We will never change the settings of your pumps, dispensers, tank gauges, payment terminals or any equipment in a hazardous area. LitreIQ runs in the cloud on your own devices and your own internet connection. It is not installed on forecourt equipment or on networks that belong to your fuel supplier.
We do not handle payments or card numbers
LitreIQ does not process payments, route money or give payment instructions. We do not hold full card numbers. Where a report from your card provider includes card digits, LitreIQ only stores the masked version (for example the last four digits), which is enough to match a transaction without exposing the card.
POPIA: who is responsible for what
| Role under POPIA | Who | What it means |
|---|---|---|
| Responsible party | You, the client | You decide why and how your business and staff information is used. It remains your information. |
| Operator | Blue Oceans Approach (Pty) Ltd | We process your information only on your instructions, under a written operator agreement, and keep it secure. |
| Sub-operators | The vendors of systems you choose to connect, and our hosting provider | They handle only what is needed for the connection or service, and are listed for you. [VERIFY sub-operator list page] |
- Consent records: before you connect a system, LitreIQ shows you exactly what it will be able to see and do. What you agreed to, and when, is kept as a record.
- Special personal information: health records (such as medicals), payroll and biometric data (such as fingerprint clocking) are flagged as sensitive and get stricter defaults: narrower access, shorter retention and extra confirmation before they are connected.
- Security compromises: if we have reason to believe your information has been accessed by someone without authority, we will tell you without undue delay, so that you can meet your own duties under section 22 of POPIA. We will give you the facts we have and help you notify the Information Regulator and the people affected where that is required.
- Leaving LitreIQ: on request we export your data (CSV and PDF). We then delete it within 30 days, unless you ask us to keep it longer or the law requires us to.
Cameras and staff monitoring
Forecourt Vision, which links camera footage to a case, is a later phase. It is off by default, is not part of the trial, and will only be offered with strict POPIA and labour-law controls in place. A LitreIQ case is always an investigation, never an accusation.
Responsible disclosure
If you believe you have found a security weakness in LitreIQ or this website, please tell us privately at security@litreiq.com [VERIFY mailbox exists] before sharing it with anyone else. Please include enough detail for us to reproduce the issue.
- Do not access, change or delete data that is not yours, and stop as soon as you have shown the problem.
- Do not run tests that could slow down or interrupt the service for our clients.
- Give us a reasonable time to fix the issue before you disclose it publicly.
We will acknowledge your report, keep you informed while we fix it, and credit you if you would like us to. [REVIEW NEEDED BY attorney: safe-harbour wording]
Questions
For questions about security or privacy, e-mail privacy@litreiq.com. Read our privacy notice and PAIA manual.
Find out what your station is losing. Then stop it.
14 days free on one site. No card details needed to start. Read-only, so nothing in your systems changes.