Privacy Policy

How Witty Technologies collects, uses, and protects your personal information, in plain language.

Last updated: 27 August 2026.

1. Who we are

Witty Notify is operated by Witty Technologies ("we", "us", "our"), a South African business. Registration number: [TODO]. Registered address: [TODO]. We are the "responsible party" under the Protection of Personal Information Act, 2013 (POPIA) for the personal information described in this policy.

2. What we collect

Account information: name, email address, phone number, and password (hashed, never stored in plain text).

WhatsApp number: the mobile number you verify to use the bridge.

Email content: the sender, subject, body, and attachments of emails that pass through your forwarding address — encrypted before storage (see Security & Privacy).

Payment information: if you buy credits or subscribe to a plan, our payment processor (PayFast) handles your card or bank details directly — we never see or store full card numbers. We keep a record of the transaction amount, date, and status.

Usage and activity data: message delivery logs, timestamps, and technical metadata needed to run and troubleshoot the service.

3. Why we process it

Primarily to provide the service you've signed up for: bridging your email into WhatsApp, billing you correctly, and keeping your account secure. We also process limited data for fraud prevention, to comply with legal obligations, and to respond when you contact us for support.

4. How we protect it

Email content is encrypted with AES-256-GCM before it touches disk; passwords are hashed with Argon2id; all traffic runs over TLS. Full technical detail is on the Security & Privacy page — worth reading in full since it covers exactly what's encrypted and what isn't.

5. How long we keep it

Your email stays stored, encrypted, for as long as your account exists — that's what makes the inbox, search, and threading actually work. Deleting your account from your profile permanently erases your stored emails, attachments, and account data outright. This is a real, irreversible deletion, not a soft flag.

6. Who we share it with

We don't sell your personal information. We share it only with the services needed to actually run the product:

• Meta (WhatsApp Business Cloud API) — to deliver and receive your WhatsApp messages. Meta processes message content as it passes through their platform.
• PayFast — to process payments for credits and subscriptions. They handle your payment details directly; we only receive confirmation of success/failure and the amount.
• Your own email provider — if you connect "Send As Your Own Mailbox," replies are relayed through your provider's own SMTP servers using credentials you supply.
• Our hosting and infrastructure providers, who store and run the service on our behalf under confidentiality obligations.

7. International transfers

Meta is a United States company, so WhatsApp message content necessarily leaves South Africa when it's delivered. Where this happens, we rely on the safeguards required by POPIA section 72 (contractual and regulatory protections at the receiving party).

8. Your rights under POPIA

You have the right to:

• Ask us to confirm what personal information we hold about you, and access it.
• Ask us to correct or update inaccurate information.
• Ask us to delete your information — or do it yourself, instantly, from your profile.
• Object to processing of your information on reasonable grounds.
• Lodge a complaint with South Africa's Information Regulator if you believe we've mishandled your information: inforegulator.org.za or POPIAComplaints@inforegulator.org.za.

9. Cookies

We use strictly necessary cookies only — to keep you signed in and protect against cross-site request forgery. We don't use advertising or cross-site tracking cookies.

10. Children

Witty Notify is intended for business use by adults. We don't knowingly collect information from children, and the service isn't directed at them.

11. Changes to this policy

If we make material changes, we'll update the date at the top of this page and, where required by law, notify you directly.

12. Contact us / Information Officer

For any privacy question, or to exercise the rights above, contact our Information Officer: [TODO — name], connect@wittytechnologies.com. POPIA requires this role to be registered with the Information Regulator before the business processes personal information at scale — confirm this registration is in place.

See also our Terms of Service and Security & Privacy pages, or check the FAQ.