1. Scope and our privacy roles
This Policy applies to paurtal.com, app.paurtal.com, Paurtal APIs, dashboards, applications, support channels, WhatsApp experiences and related products and services (“Services”).
For account, billing, website, security and direct marketing information, Paurtal generally acts as a controller or responsible party. When a customer uses Paurtal to process its own contacts, customers, event attendees, employees or message recipients, the customer determines the purposes and means of that processing and Paurtal generally acts as its processor or operator. Individuals should first direct requests about customer-controlled data to that customer. Our Data Processing Addendum governs customer service data.
2. Information we collect
- Account and organisation data: names, email addresses, telephone numbers, company details, roles, workspace membership, authentication identifiers and preferences.
- Messaging and CRM data: phone numbers, profiles, contacts, messages, templates, media, recordings, notes, tags, custom fields, consent records, conversation assignments and support history.
- Campaign and automation data: audience segments, campaign content, delivery events, opt-in and opt-out status, flows, bot instructions, triggers and performance analytics.
- Commerce and payment data: products, orders, invoices, transaction references, billing details and payment status. Full card or mobile-money credentials are ordinarily processed by payment providers rather than stored by Paurtal.
- Event data: registrations, attendee answers, tickets, QR codes, check-ins, waitlists, reminders and event payment records.
- AI and content data: prompts, uploaded files, generated text or images, brand information, websites, domains and other outputs requested through the Services.
- Technical and usage data: IP address, device and browser information, cookies, log data, API activity, audit events, approximate location, crash information and feature usage.
- Communications: demo requests, support tickets, feedback, complaints and records of our communications.
3. How we use information
We use information to provide, authenticate, configure and support the Services; route and deliver communications; maintain CRM, campaign, event, payment, brand and collaboration features; process subscriptions; generate analytics; detect fraud and abuse; secure accounts; troubleshoot and improve the Services; comply with law; enforce agreements; and communicate about products where permitted.
We do not sell personal information for money. We do not use customer message content to advertise unrelated third-party products. Where applicable law treats certain advertising or analytics disclosures as a “sale” or “sharing,” users may exercise the rights described below.
4. Legal bases
Depending on the jurisdiction and context, processing is based on performance of a contract, legitimate interests, consent, compliance with legal obligations, protection of vital interests, or another basis permitted by applicable law. Legitimate interests include securing and improving the Services, preventing abuse, providing customer support and managing our business, balanced against individual rights.
5. When information is shared
We may disclose information to: the customer controlling the relevant workspace; authorised workspace users; Meta and messaging providers; hosting, database, authentication, analytics, communications, AI, support and payment providers; professional advisers and auditors; authorities where legally required; and parties involved in a merger, financing, reorganisation or sale. Providers may process data only for authorised services and subject to contractual safeguards where required.
Customers control whom they message and which integrations they connect. Their privacy notices and lawful instructions also apply to customer-controlled data.
6. Meta, WhatsApp and connected platforms
Paurtal integrates with Meta technologies, including the WhatsApp Business Platform. Information submitted through these integrations may be processed by Meta under Meta’s own terms and privacy policies. Customers must provide all required notices, obtain valid consent or another lawful basis, honour opt-outs, use approved message templates where required and comply with Meta’s Platform Terms, WhatsApp Business Terms, Commerce Policies and messaging rules.
Paurtal requests and uses platform data only to provide, secure and improve the customer-requested integration, comply with law and enforce applicable terms. We do not transfer platform data to data brokers or use it for unauthorised surveillance, eligibility decisions or unrelated profiling. Users may request deletion through privacy@paurtal.com or the relevant in-product account controls.
7. Artificial intelligence and automated processing
AI features may analyse prompts, conversations, documents, CRM fields and business context to draft replies, classify records, recommend actions, automate workflows or create content. Outputs can be inaccurate and must be reviewed before consequential use. Customers must not use Paurtal AI to make solely automated decisions producing legal or similarly significant effects unless they have a lawful basis, provide required notices and safeguards, and permit human review. We may use specialised AI providers as subprocessors; customer data is not authorised for their independent advertising purposes.
8. International transfers
We operate globally and information may be processed outside the country where it was collected. Where required, we use recognised safeguards such as adequacy decisions, contractual clauses, data-processing agreements and supplementary security measures. South African information is handled in accordance with POPIA’s cross-border transfer requirements; EEA and UK information is transferred using applicable lawful mechanisms.
9. Retention and deletion
We retain information only for as long as needed for the purposes above, customer instructions, contractual commitments and legal, tax, accounting, security and dispute requirements. Retention varies by data type and customer configuration. Following termination, customer service data is deleted or anonymised within a commercially reasonable period, subject to backups, legal holds and required records. Backup copies are isolated and expire through normal rotation. Customers remain responsible for exporting needed data before termination.
10. Security
We use administrative, technical and physical safeguards appropriate to risk, including access controls, tenant separation, encryption in transit, logging, monitoring, backups, vulnerability management and incident-response processes. No system is completely secure. Customers must protect credentials, configure permissions carefully and notify security@paurtal.com of suspected compromise.
11. Privacy rights and choices
Subject to local law, individuals may request access, correction, deletion, restriction, objection, portability, withdrawal of consent and review of certain automated decisions. You may also opt out of direct marketing and lodge a complaint with a supervisory authority, including South Africa’s Information Regulator where applicable.
Submit requests to privacy@paurtal.com. We may verify identity and authority. If Paurtal processes the information solely for a customer, we will refer the request to that customer and provide reasonable assistance. Authorised agents may submit requests where recognised by law.
12. Children
The Services are designed for businesses and are not directed to children. Customers may not knowingly use Paurtal to collect children’s information without a valid legal basis, appropriate notices, necessary parental or guardian authorisation and safeguards required by law.
13. Changes
We may update this Policy to reflect changes in the Services, law or our practices. We will post the revised version and update the effective date. We will provide additional notice of material changes where required.
14. Contact us
Paurtal South Africa (Pty) Ltd
Registration: 2026/011667/07
0 Kopje Road, Morningside, Sandton, Gauteng 2057, South Africa
Privacy: privacy@paurtal.com
Security: security@paurtal.com