Draft for legal review

Privacy & POPIA notice

Version 2026-10-draft-1

This notice explains how Artisan24 ("we", "us") handles personal information under the Protection of Personal Information Act (POPIA).

1. Whose information

Business owners and staff who use Artisan24, and the customers of those businesses who call, message, chat or book ("callers").

2. What we collect

Owners: name, contact details, business details, billing details (card details are held by PayFast, not us), and identity details if you choose verification (processed by SmileID).

Callers: phone number, name and address if given, messages, call recordings and transcripts (only where disclosed at the start of the call), and booking details.

3. Why

To provide the service: answer and log calls, send text-backs and confirmations, book jobs, request reviews, bill you, prevent abuse and improve the service.

4. Who we share with (operators)

Hosting (Vercel), database (Neon), payments (PayFast), telephony (Twilio), WhatsApp (Meta), AI (Anthropic, ElevenLabs), email (Resend), calendar (Google), verification (SmileID) and our support tools. Some process information outside South Africa under appropriate safeguards.

5. How long we keep it

Call recordings and transcripts: 90 days by default, then deleted. Raw identity-verification data: 30 days after the result. ID documents for phone numbers: deleted 30 days after approval. Billing records: as required by law.

6. Your rights

You can ask for access, correction or deletion of your information, or object to processing, by emailing privacy@artisan24.app. You may complain to the Information Regulator.

7. Businesses as responsible parties

For callers' information, the business you contacted decides why it is processed; we process it on their behalf. The business must tell callers it uses an AI assistant, which our assistants also say at the start of every call and chat.