Legal
Privacy Policy
Last updated: 9 May 2026
In line with the Protection of Personal Information Act (POPIA, 2013), Republic of South Africa
Qwikly is built and run by Clarke Agency in Cape Town. This page explains, in plain English, what information we collect, why we collect it, who we share it with, how long we keep it, and what you can do about it. If anything here is unclear, email us at hello@qwikly.co.za.
01
Who we are
Qwikly is a product of Clarke Agency, a business in Cape Town, South Africa. For information about business owners who sign up to Qwikly, Clarke Agency is the responsible party under POPIA.
For information about end visitors who chat with a Qwikly digital assistant on a client website, the client business is the responsible party. Clarke Agency acts as an operator on the client’s behalf.
Our Information Officer can be reached at hello@qwikly.co.za. Address all data and privacy enquiries to that mailbox.
02
What we collect
We try to collect as little as we need to run the service well. The data falls into three groups.
Business owners (when you sign up)
- ·Your name, business name, and the email you sign up with
- ·Your WhatsApp number, services, and pricing settings
- ·Billing details for your subscription
Visitors to your website (people who chat with the digital assistant)
- ·Name, phone number, and email address if they share them
- ·The conversation they have with the digital assistant
- ·Documents or photos they choose to attach in chat
- ·Booking details: service requested, date, time, and area
Technical data, collected automatically
- ·IP address, browser type, and pages visited
- ·Session and authentication cookies so logins keep working
- ·Error logs we use to diagnose problems
03
Why we use it
We use this information to:
- ·Run the digital assistant and answer your visitors on your behalf
- ·Capture leads, qualify them, and book them in
- ·Send booking confirmations and follow-up messages
- ·Bill you for your subscription and issue invoices
- ·Improve the service in aggregate, never for advertising
- ·Meet our legal duties under POPIA, ECTA, and South African tax law
We do not sell personal information. We do not use it for advertising. The only reason we hold it is to run Qwikly.
04
Who can access it
The Clarke Agency team can access account and visitor data on a need-to-know basis to run, support, and bill the service. Beyond that, only the third-party operators below ever see it. Each one is bound by a written agreement with us.
Supabase
Database and authentication
Stores account data and conversations. SOC 2 Type II certified. Hosted on AWS infrastructure in the eu-west-1 region.
Privacy noticeTwilio
WhatsApp and SMS delivery
Delivers WhatsApp and SMS messages on our behalf. Acts as an operator under POPIA and follows the Twilio Trust Center commitments.
Privacy noticeAnthropic
Reply generation for the digital assistant
We pass each visitor message to Anthropic so the digital assistant can write a reply. Anthropic does not retain message content for training under our enterprise terms.
Privacy noticeResend
Transactional email delivery
Sends booking confirmations, lead notifications, and account emails. Operator under POPIA.
Privacy noticePaystack
Subscription payments
Processes subscription payments. Stores billing details directly, we never see card numbers.
Privacy notice05
How long we keep it
We hold personal information only for as long as we have a real reason to:
- ·Business account information, kept for as long as your account is active, then for 90 days after closure, then deleted
- ·Visitor conversations and messages, kept for 24 months from the last message, then deleted automatically
- ·Documents shared in chat, kept for 12 months, then deleted automatically
- ·Tax and billing records, kept for 5 years as required by South African tax law
- ·Diagnostic logs, kept for 90 days
You can ask us to delete your information at any time using the form linked below. We honour deletion requests within 30 days, except where we are legally required to keep records (for example, tax invoices).
06
Your rights under POPIA
POPIA gives you specific rights over personal information that relates to you. You can use any of them, free of charge, by emailing hello@qwikly.co.za or, for deletion, the form linked below.
Right to access
You can ask for a copy of the personal information we hold about you.
Right to correction
You can ask us to fix anything that is wrong or incomplete.
Right to deletion
You can ask us to delete your information. The fastest way is the form linked at the bottom of this page.
Right to objection
You can object to processing that relies on our legitimate interest, including marketing.
Right to complain
If you think we have mishandled your information, you can complain to the Information Regulator of South Africa at inforegulator.org.za.
We will respond within 30 days. If we cannot help, we will explain why.
07
Where data lives
Qwikly account and visitor data is stored on Supabase’s eu-west-1 (Ireland) region. Some operators we work with, such as Anthropic and Resend, are based in the United States, so processing them happens there. Each transfer is covered by Standard Contractual Clauses or equivalent safeguards required under POPIA section 72.
08
Cookies
Qwikly uses two kinds of cookies. We do not use any third-party advertising cookies.
- ·Session and authentication cookies, so you stay logged in to the dashboard
- ·A consent cookie, so we remember your choice from the cookie banner and don’t pester you
You can clear or block these in your browser settings. If you block the auth cookies you will not be able to log in.
09
Security
Data in transit is encrypted with TLS. Data at rest is encrypted by Supabase. Access to the production database is limited to the Clarke Agency team and protected by SSO and 2FA. We do not store payment card data ourselves; that is handled by Paystack.
If you believe your account or data has been compromised, email hello@qwikly.co.za immediately. If a breach is likely to harm you, we will notify you and the Information Regulator within 72 hours of becoming aware of it, as POPIA requires.
10
Children
Qwikly is not for people under 18. We do not knowingly collect personal information from minors. If you think a minor has shared information with us, email us and we will delete it.
11
Changes to this policy
If we make material changes, we will email account holders before the change takes effect. The “Last updated” date at the top of this page always reflects the latest version.
12
Contact and requests
Want your data deleted?
Use the form below. Enter the email or phone you used to chat with a Qwikly assistant and we will email you a link to confirm. Once confirmed, we soft-delete your conversations immediately and remove them entirely on the next daily retention run.
Request data deletionYou can also lodge a complaint directly with the Information Regulator of South Africa at inforegulator.org.za.
See also our Terms of Service.