Privacy Policy

Last updated: 8 February 2026

1. Introduction

Welcome to BizAI CRM. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website or use our services and tell you about your privacy rights and how the law protects you.

2. Information We Collect

We collect information you provide directly to us, including:

  • Account Information: Name, email address, company name, phone number
  • Business Information: Company details, industry, number of employees
  • Usage Data: How you interact with our service, features used, time spent
  • Payment Information: Billing address and payment card details (processed securely by third-party payment processors)
  • Customer Data: Data you input into the CRM system about your customers, quotes, appointments, etc.
  • Communication Data: Your communications with us, including support requests and feedback

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Send you technical notices, updates, security alerts, and support messages
  • Respond to your comments, questions, and customer service requests
  • Communicate with you about products, services, offers, and events
  • Monitor and analyze trends, usage, and activities in connection with our services
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities
  • Comply with legal obligations

4. Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. Your data is stored on secure servers with encryption at rest and in transit.

We use Supabase for database hosting, which provides enterprise-grade security including:

  • Data encryption at rest and in transit
  • Regular security audits and compliance certifications
  • Automated backups and disaster recovery
  • Row-level security and access controls

5. Data Sharing and Third Parties

We may share your information with:

  • Service Providers: Third-party vendors who perform services on our behalf (hosting, payment processing, email delivery)
  • Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition
  • Legal Requirements: When required by law or to respond to legal processes

We do not sell your personal data to third parties. We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

6. Your Data Protection Rights (POPIA Compliance)

Under South Africa's Protection of Personal Information Act (POPIA), you have the following rights:

  • Right to Access: You can request copies of your personal data
  • Right to Rectification: You can request correction of inaccurate or incomplete data
  • Right to Erasure: You can request deletion of your personal data
  • Right to Restrict Processing: You can request that we limit how we use your data
  • Right to Data Portability: You can request transfer of your data to another service
  • Right to Object: You can object to our processing of your personal data

To exercise any of these rights, please contact us at support@bizaicrm.co.za

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. When your subscription ends, we will retain your data for 30 days to allow for reactivation, after which it will be permanently deleted unless you request earlier deletion.

8. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside of South Africa. We ensure that any such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

10. Children's Privacy

Our service is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: