Privacy policy

1. Information we collect

• Customer and account information: names, customer numbers, contact details, identity information, addresses, employment details, next-of-kin details, bank information and documents or photographs supplied for customer administration.
• Loan and transaction records: applications, agreements, loan amounts, repayments, balances, payment references, refunds, interest, discounts and related audit records.
• Workspace user information: staff names, email addresses, phone numbers, roles, authentication information and administrative activity.
• WhatsApp information: the data described below, including messages and documents you choose to send us.
• Technical information: session information, browser and device details, IP addresses, request logs and error information that our application or infrastructure providers process to deliver and secure the service.

We receive information from you, authorised staff, customer documents and imported transaction records, and from providers supporting our services. Please supply only information relevant to your enquiry and obtain authority before supplying another person's information.

2. Why we use information

We use information to manage customer accounts and loan records, reconcile payments, prepare agreements and statements, respond to enquiries, send requested service communications, manage staff access, prevent misuse, investigate errors and meet applicable recordkeeping or legal obligations.

Depending on the activity, processing is based on your consent, taking steps at your request or performing an agreement, compliance with legal obligations, or legitimate operational and security interests, subject to applicable law, including South Africa's Protection of Personal Information Act (POPIA). Where processing depends on consent, you may withdraw it by contacting us. Withdrawal does not undo earlier lawful processing.

3. WhatsApp and information received from Meta

When you contact our WhatsApp Business number, Meta's WhatsApp Business Platform supplies your WhatsApp identifier or phone number, profile name when available, message content, message identifiers and timestamps. Documents may include a file name, caption and media identifier. We also receive message delivery and read-status events when available.

We store contact details and conversation history in our customer communication system. Authorised administrators can review messages, download documents you send, prepare replies and link a conversation to a customer record. Internal notes, consent records and follow-up details may be added by staff. Linking a conversation helps staff respond to the correct customer.

We use Meta-provided data to operate this communication service, respond to you and maintain the related conversation record. Where enabled, scheduled reminders are sent only to opted-in, verified customers, and fixed automated replies can answer requests about the customer's own balance. These replies do not use AI. Balance disclosure requires a staff-verified link to a unique customer phone number. Reply HUMAN for staff help; this pauses automated account messages until reviewed. Our business access tokens and app credentials are used on the server to authenticate requests to Meta.

You may reply STOP to withdraw your opt-in for future optional WhatsApp messages. Stopping messages does not delete existing records. Use the deletion process below if you also want your information removed.

WhatsApp and Meta also process information under their own terms and policies. See the WhatsApp Privacy Policy. This policy describes our business's handling of information after it is made available to us.

4. Sharing and service providers

Information is accessible to authorised staff as needed for their work and to service providers supporting our website and communications:

• Supabase: database, authentication and storage services for customer, workspace and WhatsApp records.
• Vercel: application hosting and server processing, including WhatsApp webhook events and requests to Meta.
• Meta / WhatsApp: sending and receiving WhatsApp messages, templates and documents.
• OpenAI, where the staff AI assistant is used: authorised staff requests and relevant account data to answer reconciliation questions. Incoming WhatsApp conversations are not automatically forwarded to OpenAI.

These providers may use subprocessors to deliver their services. Information may also be disclosed to professional advisers or public authorities where necessary and lawfully required, or to protect legal rights. Any disclosure should be limited to information relevant to its purpose.

5. International processing

Our providers may host information or access it for support and operations outside South Africa. Processing locations depend on our hosting configuration and the providers' infrastructure and support arrangements. Supabase's arrangements include Singapore and the United States; Vercel operates international infrastructure. A selected database region does not necessarily limit all support access or processing to that country.

International processing is subject to applicable data protection requirements and the relevant provider agreements. Provider details are available in Supabase's data residency guidance and Vercel's Privacy Notice.

6. Retention and security

We keep information for as long as needed for the purpose for which it was collected, including managing an active account, responding to enquiries, resolving disputes and meeting applicable financial or legal recordkeeping requirements. We review deletion requests against these needs. Archiving a conversation or closing an account does not automatically erase its history.

Our application uses authenticated staff access, role restrictions and database access controls. WhatsApp webhook signatures are checked before messages are processed, and the inbox is restricted to active administrators. No system can guarantee absolute security. Backup copies may remain until the provider's backup retention period expires.

7. Cookies and local storage

The website uses authentication and session storage to keep authorised users signed in. Browser storage may also remember interface preferences, such as the theme, and workspace drafts or settings. If you install the website as an app, a service worker may cache website assets. Shared-device users should sign out and clear browser data when appropriate. Blocking essential storage may prevent sign-in or other features from working.

8. Your rights and how to request deletion

You may request access to, correction of or deletion of your personal information, object to applicable processing, or withdraw consent where it is the basis for processing.

To request deletion of WhatsApp or other website data, email siphosam@zeemoney.co.za with the subject Personal data deletion request. Include your name, the WhatsApp phone number in international format or account email associated with the information, and whether you want conversation data, account data or both deleted. Do not send passwords, access tokens or full identity documents in your initial request.

We may ask for proportionate information to verify that you are the person concerned or authorised to act for them. We will assess the request, remove information that can lawfully be deleted and explain any records that must be retained and why. Where applicable, we will also instruct relevant service providers to delete the data. We will respond without undue delay and within any applicable legal deadline.

Deleting WhatsApp from your device, deleting your WhatsApp account or sending STOP does not automatically delete records already held by ZeeFintech. Our deletion process concerns information we control; requests about Meta's own records must be directed to Meta.

If you are dissatisfied with our handling of your information, you may raise a complaint with South Africa's Information Regulator.

9. Children

Our customer and loan administration services are intended for adults. If you believe a child has supplied information to us in error, contact us so that we can investigate and take appropriate action.

10. Contact and policy updates

For privacy questions, access requests, corrections or deletion requests, contact ZeeFintech (Pty) Ltd, South Africa at siphosam@zeemoney.co.za.

We may update this policy when our services or data practices change. The latest version will be published on this page with its updated date.