← Back to Pinty

Privacy Policy

Last updated: November 2026 · Pinty (Pty) Ltd (Reg. 2026/850504/07)

1. Overview

Pinty (Pty) Ltd ("Pinty", "we", "us", or "our") respects your privacy and is committed to protecting personal information in compliance with South Africa's Protection of Personal Information Act (POPIA) and applicable international standards.

2. Information We Collect

When you use Pinty software or connect your WhatsApp Business Account via Meta, we may collect:

• Business Profile: Business name, WhatsApp Business Account ID (WABA ID), and verified phone number IDs.
• Messages and Transactions: Incoming customer messages sent to your connected business number and payment confirmation details needed to process orders.
• Contact Information: Business email address and phone number provided during onboarding.
• Website Enquiries: When you complete the "Get started" form on pinty.co.za, we collect your business name, business email, contact person, mobile number, the service you are interested in, and any message you choose to send us.
• Verification Codes: When an existing client verifies their email, we temporarily store a one-time code, which expires after 10 minutes.
• Technical Information: Our hosting and security providers automatically process technical data such as your IP address and browser type in order to deliver the website and protect it from abuse.

3. How We Use Information

We use your information solely to:

• Provide and operate your WhatsApp AI assistant and booking/order flows.
• Process payments through licensed payment partners.
• Provide technical support, operational alerts, and service improvements.
• Respond to enquiries submitted through our website, including contacting you to discuss your needs and send you a quote.
• Verify the identity of existing clients before they connect a WhatsApp Business number.

4. WhatsApp & Meta Platform Data

We access WhatsApp Business API services via Meta Platforms, Inc. We do not sell your personal data or your customers' data. Data is retained only for as long as necessary to fulfill the services requested or comply with legal requirements.

5. Cookies

The Pinty website does not use advertising, analytics, or tracking cookies, and we do not use any tracking technologies to profile visitors.

• Security cookies: Our website security provider may set a strictly necessary cookie to distinguish people from automated bots. It contains no personal profile and expires within about 30 minutes.
• Fonts: Our pages load fonts from a third-party font service. To deliver the fonts, your browser shares your IP address with that service. No cookies are set for this purpose.

Because we only use strictly necessary cookies, we do not show a cookie consent banner. If we introduce analytics or other non-essential cookies in future, we will ask for your consent first and update this policy.

6. Service Providers

We share personal information only with carefully selected service providers that help us operate Pinty, and only as needed for that purpose. These include:

• Meta Platforms, Inc. — the WhatsApp Business Platform, used to connect and operate your WhatsApp Business number.
• Cloud hosting and database providers — secure storage of client and enquiry records.
• Email delivery providers — sending transactional emails, such as verification codes and enquiry confirmations.
• Website hosting and security providers — delivering our website and protecting it from abuse.
• Licensed payment service providers — processing payments.

Our service providers may only use personal information on our instructions and are required to keep it secure and confidential.

Some of these providers may store or process information outside South Africa. Where this happens, we rely on providers that are bound by data protection obligations offering a level of protection comparable to POPIA, as required by section 72 of POPIA.

7. Data Retention

We keep personal information only for as long as we need it for the purposes described in this policy or as required by law. Website enquiries that do not lead to an agreement are deleted within 12 months, unless you ask us to delete them sooner. You can request deletion at any time via our Data Deletion page.

8. Security & Your Rights

We implement industry-standard encryption in transit and at rest. Under POPIA, you have the right to request access to, correction of, or deletion of your personal information, and to object to its processing.

If you believe we have not handled your personal information properly, you may lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za or POPIAComplaints@inforegulator.org.za.

9. Contact Us

For any privacy-related questions or data subject requests, please contact our Information Officer at hello@pinty.co.za.