Last updated: 31 October 2026.
Voyage is built privacy-first and aligned with South Africa's Protection of Personal Information Act (POPIA). This policy explains what personal information we process, why, and the choices and rights you have.
Who is responsible
Your employer (the company whose Voyage workspace you use) is the responsible party for the personal information processed about its employees. Voyage acts as an operator, processing that information on the company's instructions to provide the service.
What we process
- Account & profile — name, work email, employee number, role and reporting line.
- Trip & expense data — travel requests, routes, mileage, receipts and expense claims.
- Optional personal details you choose to share — home address, vehicle details and emergency contacts. These are private by default; you decide, field by field, what to share with your company.
- Location — collected only when you enable trip tracking, to record distance for business mileage records.
- Technical — device and log information needed to run and secure the service.
Your POPIA rights
You can, at any time:
- Access & export your personal data from the web account menu → Privacy & data → Download my data. If you cannot sign in, contact [email protected].
- Correct inaccurate information.
- Erase your personal information. The web Privacy & data page explains the erasure action and requires confirmation. Some financial and audit records must be retained; the confirmation explains that required records may remain. Contact [email protected] if you cannot use the web account or need help with a request.
- Object to, or withdraw consent for, optional processing such as location tracking.
How long we keep it
We keep personal information only as long as needed to provide the service or as required by law. Financial and audit records may remain where retention obligations apply. Erasure does not promise deletion of records the company must retain.
Security
Each company's data is isolated in its own database schema. Passwords are hashed, traffic is encrypted in transit, and access follows least-privilege rules. See our security page for more.
Contact
To exercise a right or ask a privacy question, email [email protected] or use the contact page, or speak to your company administrator.