Draft for legal review
Privacy & POPIA notice
Version 2026-10-draft-1
This notice explains how Artisan24 ("we", "us") handles personal information under the Protection of Personal Information Act (POPIA).
1. Whose information
Business owners and staff who use Artisan24, and the customers of those businesses who call, message, chat or book ("callers").
2. What we collect
Owners: name, contact details, business details, billing details (card details are held by PayFast, not us), and identity details if you choose verification (processed by SmileID).
Callers: phone number, name and address if given, messages, call recordings and transcripts (only where disclosed at the start of the call), and booking details.
3. Why
To provide the service: answer and log calls, send text-backs and confirmations, book jobs, request reviews, bill you, prevent abuse and improve the service.
4. Who we share with (operators)
Hosting (Vercel), database (Neon), payments (PayFast), telephony (Twilio), WhatsApp (Meta), AI (Anthropic, ElevenLabs), email (Resend), calendar (Google), verification (SmileID) and our support tools. Some process information outside South Africa under appropriate safeguards.
5. How long we keep it
Call recordings and transcripts: 90 days by default, then deleted. Raw identity-verification data: 30 days after the result. ID documents for phone numbers: deleted 30 days after approval. Billing records: as required by law.
6. Your rights
You can ask for access, correction or deletion of your information, or object to processing, by emailing privacy@artisan24.app. You may complain to the Information Regulator.
7. Businesses as responsible parties
For callers' information, the business you contacted decides why it is processed; we process it on their behalf. The business must tell callers it uses an AI assistant, which our assistants also say at the start of every call and chat.