Last updated: 5 November 2026
Your customers trust you with their details when they message your business. Here is exactly how AskZuri looks after that information: where it's stored, who handles it, how long we keep it and what we do if something goes wrong.
Every connection uses HTTPS, and data is encrypted at rest in our database.
Conversations are removed automatically. Enquiries stay while you have an account, so you can see your history.
ID, passport, card, bank account and medical-aid numbers are stripped out of chats before they're stored.
We never sell your customers' information, and never use it to advertise to them.
Our database is hosted in Western Europe on Cloudflare, under data processing agreements. Every provider is listed below.
If your data is ever affected by a security incident, we tell you within 72 hours, with what you need to act.
When someone chats to your assistant, your business is the responsible party and AskZuri is your operator. We process that information only on your instructions, to answer your customers and pass their enquiries to you.
For your own login and billing details, and for visitors to askzuri.co.za, AskZuri is the responsible party. See our privacy policy.
AskZuri is a product of Blackbird Trading 390 CC, Cape Town, South Africa. Our written POPIA operator agreement (the contract required by section 21) forms part of our terms. Ask us for a copy at hello@askzuri.co.za.
These are the services AskZuri uses to run your assistant. Each is bound by a data processing agreement. We'll update this list at least 30 days before adding a new one that handles your customers' data.
| Provider | What it does | Data it handles | Where | Status |
|---|---|---|---|---|
| Cloudflare | Hosting, database, AI processing (chat, speech), security and bot protection | All service data | Database in Western Europe; served from Cloudflare's global network, including South Africa | In use |
| Anthropic | Advanced AI for bookings and quotes, where enabled | The conversation text for that reply | United States | Coming soon |
| Telegram | Alerts to owners who connected Telegram (being replaced by WhatsApp) | Alert text: enquirer's name, number and request | Global | In use |
| Meta (WhatsApp Business Platform) | WhatsApp conversations and owner alerts on WhatsApp | WhatsApp messages and voice notes, phone numbers | EU and United States | Coming soon |
| Twilio | AI phone answering and missed-call text-back | Caller number, call speech as text, SMS text | United States | Coming soon |
| Resend | Sending emails such as quote reminders | Recipient email address and email text | United States | Coming soon |
Services you connect yourself (for example your own HubSpot, Pipedrive, Zapier or webhook) act for your business under your own agreement with them. Where information is processed outside South Africa, it's protected as POPIA section 72 requires, through the providers' data processing agreements and, where they apply, standard contractual clauses.
| Information | Kept for |
|---|---|
| Chat conversations | 90 days, then deleted automatically |
| Enquiries, bookings, review requests and missed calls | While your account is active, or a shorter period you choose (6, 12, 24 or 36 months), after which they're deleted automatically |
| Quotes and invoices | While your account is active. They're your tax records, so they're never deleted automatically |
| Everything, when you leave | Exported for you if you want it, then deleted within 30 days (except what the law requires us to keep, such as our own tax records) |
We follow a written security and breach procedure. If there are reasonable grounds to believe your customers' information has been accessed by someone who shouldn't have it, we contain it immediately, tell you within 72 hours with what happened and what was affected, and help you notify the Information Regulator and your customers as POPIA section 22 requires.
If one of your customers asks to see, correct or delete their information, forward it to us. We can remove one person's details from your account by their phone number or email, and send you a copy of everything we hold for your business. If a request reaches us directly, we pass it to you, because it's your customer.
On request we'll send our POPIA operator agreement, our security and breach procedure, and this sub-operator list as documents you can file. Email hello@askzuri.co.za.
Questions about privacy or security, or a request about personal information: hello@askzuri.co.za
If you're not satisfied with our answer, you can contact the Information Regulator (South Africa) at inforegulator.org.za.