Contract TemplateClickwrap Agreements

SaaS Terms of Service
Template — South Africa

An attorney-drafted SaaS Terms of Service template designed specifically for South African software-as-a-service platforms. This comprehensive, legally compliant clickwrap agreement governs the entire user relationship — from account creation through subscription billing, acceptable use, data handling, and termination — ensuring compliance with the Electronic Communications and Transactions Act 25 of 2002 (Sections 11-12 for electronic transactions), the Consumer Protection Act 68 of 2008 (Section 14 right to fair terms), and the Protection of Personal Information Act 4 of 2013.

Drafted by qualified South African attorneys

Reviewed for compliance with current legislation · Last updated April 2026

Why It Matters

Why Your Business Needs This Agreement

Unenforceable Terms Due to CPA Non-Compliance

SaaS platforms that use generic international terms of service frequently discover that key provisions — particularly limitation of liability, automatic renewal, and warranty disclaimers — are unenforceable against South African consumers. The CPA's plain language requirement (Section 22), prohibition on unfair terms (Section 48), and mandatory consumer rights (Sections 44, 51, 55) override conflicting contractual provisions. A term declared unfair by a court or the National Consumer Tribunal can be severed or voided entirely, leaving the provider without the protection they assumed they had.

No Legal Basis for Account Termination

Without properly drafted Terms of Service that define prohibited uses, establish a graduated enforcement process, and reserve the right to terminate for breach, the provider has no clear legal basis for suspending or terminating abusive accounts. This can leave the platform unable to act against users who spam, harass, distribute malware, or otherwise abuse the service — damaging the experience for all other users and potentially exposing the platform to third-party liability.

ECTA Disclosure Failures Rendering Transactions Voidable

ECTA Section 43 requires specific business information and transaction disclosures. Platforms that fail to display their full legal name, physical address, registration number, and contact details risk having transactions declared voidable at the user's election. This is not a theoretical risk — ECTA's disclosure requirements are clear and specific, and non-compliance gives users a legal basis to challenge the validity of the entire agreement.

POPIA Liability for Undisclosed Data Processing

SaaS platforms that collect and process user personal information without transparent disclosure in their Terms of Service and Privacy Policy violate POPIA's openness condition (Section 18) and purpose limitation condition (Section 13). This exposes the platform to Information Regulator enforcement, administrative fines of up to R10 million, and civil claims from affected data subjects. The Terms of Service must clearly disclose all data collection and processing activities.

Subscription Billing Disputes Without Clear Terms

Without clear subscription billing terms — including price, billing cycle, renewal date, price change notice requirements, and cancellation procedures — platforms face persistent billing disputes, chargeback claims, and consumer complaints. The CPA's automatic renewal provisions (Section 14) require specific notice periods and cancellation mechanisms that must be reflected in the Terms of Service.

Data Portability Failures Creating Lock-In

Users who cannot export their data from a SaaS platform on cancellation are effectively locked in — they cannot switch to a competitor without losing their data. This creates consumer complaints, negative reviews, and potential CPA claims for unfair contract terms. Terms of Service that include clear data export provisions, standard formats, and reasonable export periods mitigate this risk and build user trust.

What is a SaaS Terms of Service?

Every SaaS platform needs legally enforceable Terms of Service — they are the contract that governs the relationship between the platform provider and every user who creates an account. In South Africa, SaaS Terms of Service must navigate a complex regulatory environment that includes the Electronic Communications and Transactions Act 25 of 2002 (ECTA), the Consumer Protection Act 68 of 2008 (CPA), and the Protection of Personal Information Act 4 of 2013 (POPIA). Generic international templates fail to address these South African-specific requirements, leaving platforms exposed to regulatory penalties, unenforceable limitation clauses, and contractual terms that South African courts may declare void.

ECTA provides the legal foundation for clickwrap agreements in South Africa. Section 11 confirms that agreements are not invalid merely because they are in electronic form, while Section 12 addresses the formation of electronic contracts — establishing that an agreement is formed when the acceptance of an offer is received by the offeror. For SaaS platforms, this means the Terms of Service become binding when the user completes the acceptance mechanism (checking the "I Agree" box and clicking the acceptance button). Section 22 imposes specific requirements for electronic transactions: the service provider must give the consumer a reasonable opportunity to review the terms, must provide an opportunity to correct input errors, and must provide a record of the transaction. Section 43 requires e-commerce providers to make specified business information available on their website — including their full legal name, physical address, registration number, website address, and contact details.

The Consumer Protection Act 68 of 2008 adds substantial obligations for SaaS platforms whose users qualify as consumers. Section 14 — the right to fair, just, and reasonable terms — is a central provision. It empowers a court to declare any contract term unfair if it is excessively one-sided in favour of the supplier, or if the terms were so adverse to the consumer that their agreement was not truly voluntary. Section 22 requires that terms be in plain and understandable language — "plain language" is defined as language that enables an ordinary consumer with average literacy and experience to understand the content without undue effort. Section 40(1) requires that fixed-term agreements lasting more than 12 months must be automatically renewable on a month-to-month basis unless the consumer directs otherwise, and the supplier must give notice 40-80 business days before the expiry date. Section 44 provides a 5-business-day cooling-off period for electronic transactions.

POPIA governs how the SaaS platform collects, processes, stores, and shares user personal information. As a SaaS provider, you are a "responsible party" under POPIA — you determine the purpose and means of processing your users' personal information. You must comply with the eight conditions for lawful processing (Sections 8-25), appoint an Information Officer (Section 55), register with the Information Regulator, and provide mechanisms for users to exercise their data subject rights. Where you engage sub-processors (cloud infrastructure providers, analytics tools, payment processors), you must ensure compliance with POPIA Section 21 through written operator agreements.

This attorney-drafted template provides comprehensive clickwrap Terms of Service covering account registration and eligibility, subscription tiers and billing, automatic renewal with CPA-compliant notice, acceptable use restrictions, intellectual property ownership, data handling and POPIA compliance, service availability and support, limitation of liability calibrated for CPA requirements, termination and data portability, and dispute resolution. The terms are structured for clickwrap acceptance that South African courts recognise as enforceable under ECTA — with a checkbox, acceptance button, and timestamped record of acceptance.

Who Needs This

SaaS companies launching platforms in or targeting the South African market
Software developers monetising web applications via subscription-based models
B2B platform providers offering cloud-based services to South African businesses
Startup founders who need legally compliant terms of service before their platform launch
Existing SaaS platforms updating their terms for POPIA, CPA, and ECTA compliance
Marketplace operators hosting third-party sellers and managing transaction flows
Freemium and open-core platforms that need terms covering both free and paid tiers
International SaaS companies entering the South African market and needing locally compliant terms

Want early access to the SaaS Terms of Service template?

We'll email you the moment early access opens

ECTA Sections 11 and 12 confirm that clickwrap agreements formed through electronic acceptance are legally binding in South Africa — but Section 22 requires that the user has a reasonable opportunity to review the terms before acceptance

CPA Section 14 provides the right to fair, just, and reasonable terms — a court can declare any SaaS term void if it is excessively one-sided in favour of the provider

CPA Section 40(1) requires that fixed-term subscriptions over 12 months provide 40-80 business days' notice before renewal and allow cancellation on 20 business days' notice

CPA Section 44 provides a 5-business-day cooling-off period for electronic transactions resulting from direct marketing — the user can cancel and receive a full refund within this period

POPIA applies to all SaaS platforms collecting user personal information — the provider is a responsible party who must comply with the eight conditions for lawful processing and faces fines of up to R10 million for non-compliance

Template Contents

Key Clauses Included

This SaaS Terms of Service template covers 12 essential sections, each drafted by South African attorneys.

01

Account Registration & Eligibility

Account creation requirements, age restrictions (18+ for contracting capacity under the Children's Act 38 of 2005, or 13+ with parental consent for platforms targeting younger users), accuracy of registration information, account security responsibilities (strong passwords, MFA where available), prohibition on account sharing, and the platform's right to verify identity and refuse or suspend accounts that provide false information.

02

Subscription Tiers & Billing

Defines the available subscription tiers (free, basic, professional, enterprise), pricing for each tier in South African Rand, billing cycles (monthly and annual options), accepted payment methods, the handling of failed payments (grace period, account suspension, retry logic), and the treatment of VAT at 15%. Addresses price changes with CPA-required reasonable notice (the template specifies 30 days) and the user's right to cancel if they do not accept the new pricing.

03

Automatic Renewal & Cancellation

Implements CPA Section 14-compliant automatic renewal provisions. For subscriptions longer than 12 months, the CPA requires the supplier to notify the consumer 40-80 business days before expiry and allow cancellation with 20 business days' notice. For month-to-month subscriptions, the user may cancel at any time with the agreed notice period. The template provides clear cancellation mechanisms — including a self-service cancellation option in the account settings, as the CPA requires that cancellation be no more difficult than the original sign-up process.

04

Acceptable Use Policy

Permitted and prohibited uses of the platform. Prohibitions include illegal activities, distribution of malware, spam or unsolicited communications, harassment or hate speech, intellectual property infringement, data scraping or automated access beyond authorised API limits, attempts to circumvent security measures, and activities that degrade service performance for other users. Specifies the graduated enforcement process: warning, content removal, temporary suspension, and permanent termination — with immediate termination reserved for severe violations.

05

Intellectual Property

The platform provider's ownership of the service, software code, trademarks, documentation, and user interface design — protected as literary and artistic works under the Copyright Act 98 of 1978. The user's ownership of their data and content uploaded to the platform. Limited licence grants in both directions: the provider grants the user a non-exclusive licence to access the platform, and the user grants the provider a limited licence to process their content as necessary to provide the service. Restrictions on reverse engineering, scraping, copying, and creating derivative works from the platform.

06

Data Handling & POPIA Compliance

How user data is collected, processed, stored, and deleted. Identifies the platform as a responsible party under POPIA for user account data, and as an operator under POPIA for customer data that users process through the platform. Addresses purpose limitation, data minimisation, storage limitation, cross-border transfer safeguards under Section 72, and the user's data subject rights (access under Section 23, correction under Section 24, deletion, objection under Section 11). Links to the Privacy Policy and Data Processing Agreement for detailed provisions.

07

Service Availability & Support

Uptime commitments (or explicit disclaimer of uptime guarantees for free tiers), scheduled maintenance windows with advance notification, support channels (email, chat, phone) and response times by subscription tier, the provider's right to modify the service with reasonable notice, and the circumstances under which the provider may suspend or discontinue the service. For paid tiers, references the Service Level Agreement (SLA) that defines specific uptime targets and service credit mechanisms.

08

Limitation of Liability

Caps the provider's aggregate liability at the total subscription fees paid by the user in the 12 months preceding the claim. Excludes indirect, consequential, incidental, and special damages — including lost profits, lost data, lost business opportunities, and reputational damage. Includes critical CPA-aware provisions: where the user is a consumer under the CPA, Section 51 limits the ability to exclude liability for gross negligence, and Section 61 may impose liability for defective services. The limitation clause includes carve-outs for wilful misconduct, data breaches caused by gross negligence, and IP infringement.

09

Indemnification

Mutual indemnification obligations. The user indemnifies the provider against claims arising from the user's content, the user's use of the platform in violation of the terms, and any data the user processes through the platform. The provider indemnifies the user against claims that the platform infringes third-party intellectual property rights. Each party's indemnification obligations are subject to the liability caps and include the right to control the defence of indemnified claims.

10

Termination & Data Portability

How users can cancel their subscription (self-service through account settings), the provider's right to terminate for breach of the Terms of Service or Acceptable Use Policy, the post-termination data export period (typically 30 days during which the user can download their data in standard formats), data deletion timelines (all user data deleted within 90 days of the export period), and the survival of provisions beyond termination (limitation of liability, indemnification, confidentiality, dispute resolution).

11

Modifications to Terms

The provider's right to modify the Terms of Service with reasonable notice — the template specifies 30 days for material changes. Notification through email and prominent in-platform notice. The user's right to reject changes by cancelling their subscription before the effective date. Continued use of the platform after the effective date constitutes acceptance of the modified terms. This section is calibrated for CPA Section 14 compliance, which requires that material changes to terms be fair, just, and reasonable.

12

Dispute Resolution & Governing Law

South African law as the governing law, jurisdiction of South African courts, and a structured dispute resolution process. For consumer disputes, the CPA provides access to the National Consumer Tribunal and consumer courts as alternative forums. For commercial disputes, the template provides for mediation under AFSA rules followed by binding arbitration. Includes a provision for small claims: disputes below a defined value threshold may be submitted to the small claims court for expedited resolution.

Legal Compliance

South African Law Compliance

ECTA

Electronic Communications and Transactions Act 25 of 2002

ECTA is the foundational legislation for SaaS Terms of Service in South Africa. Section 11 confirms that electronic agreements are legally valid. Section 12 governs the formation of electronic contracts — a contract is formed when acceptance is received by the offeror, which in a SaaS context occurs when the user clicks "I Agree." Section 22 requires the provider to give the user a reasonable opportunity to review the terms, to provide an opportunity to correct errors, and to provide a transaction record. Section 43 requires e-commerce providers to display specified business information including full legal name, physical address, registration number, and contact details. Section 44 provides a cooling-off period for electronic transactions where direct marketing is involved. Chapter XI provides limited liability for hosting user-generated content, provided the provider complies with notice-and-takedown procedures.

CPA

Consumer Protection Act 68 of 2008

The CPA applies to SaaS subscriptions where the user qualifies as a consumer — a natural person or juristic person with annual turnover below R2 million. Section 14 is the central provision: it provides the right to fair, just, and reasonable terms, and empowers courts to declare unfair terms void. Section 22 requires plain language — terms must be understandable to an ordinary consumer without undue effort. Section 40(1) governs fixed-term agreements: subscriptions over 12 months must provide 40-80 business days' notice before expiry, and must allow the consumer to cancel with 20 business days' notice. Section 44 provides a 5-business-day cooling-off period for electronic transactions involving direct marketing. Section 48 prohibits unfair, unreasonable, or unjust contract terms. Section 51 limits the ability to exclude liability for gross negligence. Section 55 guarantees the right to services of good quality.

POPIA

Protection of Personal Information Act 4 of 2013

POPIA governs all collection, processing, and storage of user personal information by the SaaS platform. As the entity determining the purposes and means of processing, the SaaS provider is a "responsible party" under POPIA. The provider must comply with the eight conditions for lawful processing (accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards, data subject participation). Section 55 requires the appointment of an Information Officer. Sections 23-25 provide data subject rights (access, correction, deletion). Section 19 requires appropriate security measures. Section 22 requires breach notification. Section 72 restricts cross-border transfers. Section 69 regulates direct marketing. Non-compliance can result in administrative fines of up to R10 million under Section 109.

Cybercrimes Act

Cybercrimes Act 19 of 2020

The Cybercrimes Act is relevant to the acceptable use provisions of SaaS Terms of Service. Section 2 criminalises unlawful access to computer systems, Section 3 criminalises unlawful interception of data, Section 5 criminalises data interference, and Section 8 criminalises cyber fraud. Section 54 imposes reporting obligations on electronic communications service providers — which may include SaaS platforms — requiring them to report certain offences to the SAPS within 72 hours. The Terms of Service should prohibit activities that constitute cybercrimes and inform users that illegal activities will be reported to law enforcement.

VAT Act

Value-Added Tax Act 89 of 1991

SaaS subscriptions are subject to VAT at 15%. The provider must issue tax invoices compliant with Section 20, displaying the provider's VAT number, the user's details, the supply description, and the VAT amount. For international SaaS providers serving South African customers, the amended definition of "electronic services" may require VAT registration in South Africa and collection of VAT on supplies to South African users. The Terms of Service must clearly state whether subscription prices are inclusive or exclusive of VAT.

South African businesses are lining up for My-Contracts — be first in when we launch

POPIA CompliantLegally ReviewedDigital Signing Available
Simple Process

Create Your SaaS Terms of Service in Minutes

Our guided wizard walks you through every clause — no legal knowledge required. Attorney-drafted, South African law compliant.

01

Define your subscription tiers and billing model

Document your pricing tiers (free, basic, professional, enterprise), the features included in each tier, billing cycles (monthly and annual), accepted payment methods, and your approach to price changes and automatic renewal. This commercial structure forms the foundation of the subscription and billing sections of the Terms of Service.

02

Identify applicable legal requirements

Determine whether your users include consumers under the CPA (natural persons or juristic persons with turnover below R2 million), whether you process personal information subject to POPIA, whether you need to comply with ECTA Section 43 disclosure requirements, and whether your platform hosts user-generated content subject to ECTA Chapter XI. This assessment determines which legal provisions must be included.

03

Customise the template with your specific terms

Complete the template by inserting your subscription tiers, pricing, acceptable use restrictions, data handling practices, liability cap, and dispute resolution preferences. Every bracketed field corresponds to a decision point. Pay particular attention to the CPA-compliant automatic renewal provisions, the ECTA-required business disclosures, and the POPIA-compliant data handling sections.

04

Implement the clickwrap acceptance mechanism

Configure your platform to present the full Terms of Service during the registration flow, with a checkbox ("I have read and agree to the Terms of Service") and an acceptance button. Maintain a timestamped record of each user's acceptance, including the version of the terms that was accepted. Provide users with a link to download or print the terms. This ensures ECTA-compliant electronic acceptance.

05

Deploy and maintain the terms

Publish the Terms of Service on your website with a clear effective date. Set up automated email notifications for material changes (with the 30-day notice period required by the template). Implement the self-service cancellation mechanism in account settings. Establish the data export functionality referenced in the terms. Review and update the terms annually or when significant legal or business changes occur.

Your SaaS Terms of Service is ready
Common Questions

Frequently Asked Questions

SaaS Terms of Service are the legal agreement between a software-as-a-service provider and its users, typically accepted through a clickwrap mechanism (checking a box and clicking "I Agree"). Under ECTA, these electronic agreements are legally binding in South Africa. They are not merely "nice to have" — they are legally necessary for several reasons. First, ECTA Section 43 requires e-commerce providers to make specified business information and transaction terms available to users. Second, the CPA requires fair terms in plain language for consumer users. Third, POPIA requires transparency about data collection and processing practices. Fourth, without terms of service, the provider has no contractual framework for limiting liability, restricting platform usage, managing subscriptions, or terminating abusive accounts. Terms of Service are the legal foundation of every user relationship and the first line of defence against claims, disputes, and regulatory action.

Why This Template

What You Get With This Template

Drafted specifically for South African SaaS platforms — fully compliant with ECTA Sections 11-12 and 22-43, CPA Sections 14, 22, 40, 44, 48, and 55, and POPIA

CPA-compliant automatic renewal provisions with required notice periods, self-service cancellation, and month-to-month fallback for expired fixed terms

Plain language drafting meeting the CPA Section 22 standard — understandable to ordinary consumers without undue effort

ECTA-compliant clickwrap acceptance mechanism with timestamped records, correction opportunities, and transaction confirmations

Comprehensive POPIA data handling provisions with purpose limitation, data subject rights, cross-border transfer safeguards, and breach notification

Tiered limitation of liability calibrated for both B2B and consumer users, with CPA-compliant carve-outs

Data portability provisions with defined export periods, standard formats, and post-termination deletion timelines

Customisable template with clearly marked decision points for pricing, billing cycles, notice periods, and liability caps

Be First to Draft Your SaaS Terms of Service

Early access opens soon. Join the waiting list and we'll email you the moment it does.

One launch email — no spamFounding-member pricing