Legal

Privacy Policy

Last updated: 9 May 2026

In line with the Protection of Personal Information Act (POPIA, 2013), Republic of South Africa

Qwikly is built and run by Clarke Agency in Cape Town. This page explains, in plain English, what information we collect, why we collect it, who we share it with, how long we keep it, and what you can do about it. If anything here is unclear, email us at hello@qwikly.co.za.

01

Who we are

Qwikly is a product of Clarke Agency, a business in Cape Town, South Africa. For information about business owners who sign up to Qwikly, Clarke Agency is the responsible party under POPIA.

For information about end visitors who chat with a Qwikly digital assistant on a client website, the client business is the responsible party. Clarke Agency acts as an operator on the client’s behalf.

Our Information Officer can be reached at hello@qwikly.co.za. Address all data and privacy enquiries to that mailbox.

02

What we collect

We try to collect as little as we need to run the service well. The data falls into three groups.

Business owners (when you sign up)

  • ·Your name, business name, and the email you sign up with
  • ·Your WhatsApp number, services, and pricing settings
  • ·Billing details for your subscription

Visitors to your website (people who chat with the digital assistant)

  • ·Name, phone number, and email address if they share them
  • ·The conversation they have with the digital assistant
  • ·Documents or photos they choose to attach in chat
  • ·Booking details: service requested, date, time, and area

Technical data, collected automatically

  • ·IP address, browser type, and pages visited
  • ·Session and authentication cookies so logins keep working
  • ·Error logs we use to diagnose problems

03

Why we use it

We use this information to:

  • ·Run the digital assistant and answer your visitors on your behalf
  • ·Capture leads, qualify them, and book them in
  • ·Send booking confirmations and follow-up messages
  • ·Bill you for your subscription and issue invoices
  • ·Improve the service in aggregate, never for advertising
  • ·Meet our legal duties under POPIA, ECTA, and South African tax law

We do not sell personal information. We do not use it for advertising. The only reason we hold it is to run Qwikly.

04

Who can access it

The Clarke Agency team can access account and visitor data on a need-to-know basis to run, support, and bill the service. Beyond that, only the third-party operators below ever see it. Each one is bound by a written agreement with us.

Supabase

Database and authentication

Stores account data and conversations. SOC 2 Type II certified. Hosted on AWS infrastructure in the eu-west-1 region.

Privacy notice

Twilio

WhatsApp and SMS delivery

Delivers WhatsApp and SMS messages on our behalf. Acts as an operator under POPIA and follows the Twilio Trust Center commitments.

Privacy notice

Anthropic

Reply generation for the digital assistant

We pass each visitor message to Anthropic so the digital assistant can write a reply. Anthropic does not retain message content for training under our enterprise terms.

Privacy notice

Resend

Transactional email delivery

Sends booking confirmations, lead notifications, and account emails. Operator under POPIA.

Privacy notice

Paystack

Subscription payments

Processes subscription payments. Stores billing details directly, we never see card numbers.

Privacy notice

05

How long we keep it

We hold personal information only for as long as we have a real reason to:

  • ·Business account information, kept for as long as your account is active, then for 90 days after closure, then deleted
  • ·Visitor conversations and messages, kept for 24 months from the last message, then deleted automatically
  • ·Documents shared in chat, kept for 12 months, then deleted automatically
  • ·Tax and billing records, kept for 5 years as required by South African tax law
  • ·Diagnostic logs, kept for 90 days

You can ask us to delete your information at any time using the form linked below. We honour deletion requests within 30 days, except where we are legally required to keep records (for example, tax invoices).

06

Your rights under POPIA

POPIA gives you specific rights over personal information that relates to you. You can use any of them, free of charge, by emailing hello@qwikly.co.za or, for deletion, the form linked below.

Right to access

You can ask for a copy of the personal information we hold about you.

Right to correction

You can ask us to fix anything that is wrong or incomplete.

Right to deletion

You can ask us to delete your information. The fastest way is the form linked at the bottom of this page.

Right to objection

You can object to processing that relies on our legitimate interest, including marketing.

Right to complain

If you think we have mishandled your information, you can complain to the Information Regulator of South Africa at inforegulator.org.za.

We will respond within 30 days. If we cannot help, we will explain why.

07

Where data lives

Qwikly account and visitor data is stored on Supabase’s eu-west-1 (Ireland) region. Some operators we work with, such as Anthropic and Resend, are based in the United States, so processing them happens there. Each transfer is covered by Standard Contractual Clauses or equivalent safeguards required under POPIA section 72.

08

Cookies

Qwikly uses two kinds of cookies. We do not use any third-party advertising cookies.

  • ·Session and authentication cookies, so you stay logged in to the dashboard
  • ·A consent cookie, so we remember your choice from the cookie banner and don’t pester you

You can clear or block these in your browser settings. If you block the auth cookies you will not be able to log in.

09

Security

Data in transit is encrypted with TLS. Data at rest is encrypted by Supabase. Access to the production database is limited to the Clarke Agency team and protected by SSO and 2FA. We do not store payment card data ourselves; that is handled by Paystack.

If you believe your account or data has been compromised, email hello@qwikly.co.za immediately. If a breach is likely to harm you, we will notify you and the Information Regulator within 72 hours of becoming aware of it, as POPIA requires.

10

Children

Qwikly is not for people under 18. We do not knowingly collect personal information from minors. If you think a minor has shared information with us, email us and we will delete it.

11

Changes to this policy

If we make material changes, we will email account holders before the change takes effect. The “Last updated” date at the top of this page always reflects the latest version.

12

Contact and requests

Information OfficerLiam Clarke, Clarke Agency

Emailhello@qwikly.co.za

LocationCape Town, South Africa

Want your data deleted?

Use the form below. Enter the email or phone you used to chat with a Qwikly assistant and we will email you a link to confirm. Once confirmed, we soft-delete your conversations immediately and remove them entirely on the next daily retention run.

Request data deletion

You can also lodge a complaint directly with the Information Regulator of South Africa at inforegulator.org.za.

See also our Terms of Service.