Back to Home

Privacy Policy

Protecting your data and privacy

Important Information

Effective Date: January 1, 2025
Last Updated: November 1, 2026

TulsaPax (Pty) Ltd trading as BizAI (registration number 2011/136338/07, VAT registered) is committed to protecting your privacy. This policy explains how we collect, use, and safeguard personal information when you use our website, Smart CRM, Voice Valet, WhatsApp messaging and related services.

1. Information We Collect

Personal Information You Provide

  • Name, email address, phone number, company name
  • Business information and industry details
  • Communication preferences and service requirements
  • Payment and billing information

WhatsApp Business Data

When you interact with our WhatsApp Business services, we may collect:

  • Your WhatsApp phone number
  • Message content and conversation history
  • Media files (images, documents) you share
  • Delivery and read receipts
  • Contact information from your WhatsApp profile

Voice Valet Call Data

  • Caller phone numbers and call duration
  • Call recordings and transcripts when you use Voice Valet or enable call recording
  • Transcripts of voice interactions
  • Customer service request details

Technical Information

  • IP address, browser type, and device information
  • Website usage data and analytics
  • Cookies and similar technologies (see our cookie banner on bizai.co.za)
  • Cloudflare Turnstile signals when you use website voice demos or forms that require bot protection
  • System logs and performance data

2. How We Use Your Information

We use collected information to:

  • Provide and improve our AI services
  • Process service requests and customer support
  • Communicate via WhatsApp Business and other channels
  • Provide AI-assisted features (such as inbox drafts and summaries) using the sub-processors listed in our sub-processor list
  • Send service updates and marketing communications (with consent)
  • Comply with legal obligations
  • Prevent fraud and ensure service security

3. Meta/WhatsApp Business Integration

WhatsApp Business API Compliance

We use WhatsApp Business API in accordance with Meta's policies:

  • All WhatsApp communications follow Meta's messaging guidelines
  • We obtain proper consent before initiating WhatsApp conversations
  • Customer data is processed in accordance with Meta's data handling requirements
  • We respect WhatsApp's user privacy settings and preferences
  • Meta bills WhatsApp Business Platform messages separately (per-message pricing from 1 July 2025). From 1 October 2026, the first 1,000 service messages per WhatsApp number per month are free — see Meta's WhatsApp pricing
  • BizAI is an Official Meta Business Partner for WhatsApp Business Platform integration

Data Sharing with Meta

When using WhatsApp Business services:

  • Message metadata may be shared with Meta as required by WhatsApp Business API
  • We do not share sensitive business data with Meta beyond what's necessary for message delivery
  • Customer phone numbers are processed through WhatsApp's secure infrastructure

4. Data Sharing and Disclosure

We may share your information with:

  • Sub-processors: Hosting, database, email, AI, voice and messaging providers listed at bizai.co.za/legal/sub-processors and in our Data Processing Agreement
  • WhatsApp/Meta: As required for WhatsApp Business Platform functionality
  • Analytics (with consent): Google Analytics and Meta Pixel on our marketing website when you accept cookies
  • Legal Authorities: When required by law or to protect our rights
  • Business Transfers: In case of merger, acquisition, or sale of assets

We never sell your personal information to third parties.

5. Data Security

We implement appropriate security measures including:

  • Encryption of data in transit and at rest
  • Access controls and authentication protocols
  • Regular security audits and vulnerability assessments
  • Secure cloud infrastructure with backup systems
  • Employee training on data protection

6. Your Rights (POPIA Compliance)

Under South Africa's Protection of Personal Information Act (POPIA), you have the right to:

  • Access your personal information
  • Correct or update your information
  • Delete your personal information (subject to legal requirements)
  • Object to processing of your information
  • Withdraw consent for marketing communications
  • Lodge a complaint with the Information Regulator

7. Data Retention

We keep personal information only for as long as we need it, as required by section 14 of POPIA:

  • While your account is active: Your data (including customer records, messages, call recordings and documents) is kept for as long as you keep it in BIZ AI. You can edit, export or delete it at any time.
  • After cancellation: Your data remains available to export for 30 days after your subscription ends. After those 30 days it is permanently deleted from our systems, and removed from our backups within 7 days.
  • Billing and financial records: Our own invoices and payment records for your account are kept for the periods South African tax and company law requires (currently up to 7 years).
  • Marketing data: Until you withdraw consent.
  • Legal holds: We keep information longer only where the law requires it or it is needed for a legal claim, and only for that purpose.

8. Contact Us

For privacy-related questions or requests:

Postal address: Brand Street, Midrand, Gauteng, South Africa · TulsaPax (Pty) Ltd t/a BizAI

If you're not satisfied with our response, you may contact the South African Information Regulator.

This Privacy Policy is governed by South African law and complies with POPIA requirements.