Click here for network status updatesNetwork Status

Privacy Policy

MzansiCo · Effective date: 16 September 2026 · Last updated: 16 September 2026

This Privacy Policy explains how MzansiCo (“MzansiCo”, “we”, “us”, “our”) collects, uses, shares and protects personal information when you communicate with us, or with a business we serve, over WhatsApp, and when you use our related services. We are committed to processing personal information lawfully and transparently in line with the Protection of Personal Information Act, 2013 (“POPIA”) of South Africa.

1. Who we are

The responsible party (data controller) is:

2. Scope

This policy applies to personal information we process when you: (a) send messages to, or receive messages from, a WhatsApp business number operated by us or on our behalf; (b) interact with our automated or agent-assisted messaging services; and (c) use our related services. It does not cover the independent privacy practices of Meta Platforms, or of third-party businesses who use our services and act as their own responsible party.

3. Information we collect

When you communicate with us over WhatsApp, we may process:

  • Contact identifiers — your WhatsApp phone number and WhatsApp ID, and the profile name set on your WhatsApp account.
  • Message content — the text, images, audio, video, documents, location and other content you choose to send or receive.
  • Conversation metadata — timestamps, delivery and read status, and the business number or service line involved.
  • Information you provide — details you share during a conversation, for example when you make an enquiry or request support.
  • Technical data — limited technical information needed to deliver and secure the service.

We do not knowingly collect special categories of personal information unless you voluntarily provide them, and we ask that you avoid sending sensitive information over WhatsApp unless it is necessary.

4. How we use your information

  • To receive, route and respond to your WhatsApp messages and provide our services.
  • To provide support and handle your enquiries, requests and complaints.
  • To send you messages you have consented to receive, or that are otherwise permitted under POPIA.
  • To operate, secure, maintain and improve our services.
  • To comply with our legal and regulatory obligations.

5. Legal basis for processing

We process personal information where: you have consented; processing is necessary to conclude or perform a contract with you; processing is required to comply with a legal obligation; or processing is necessary for our legitimate interests (such as securing and improving the service), balanced against your rights. For direct marketing by electronic communication we rely on consent or the existing-customer exemption permitted by POPIA section 69, and every marketing message identifies us and offers a way to opt out.

6. WhatsApp and Meta

Our messaging service operates on the WhatsApp Business Platform provided by Meta Platforms, Inc. and its affiliates. When you message us on WhatsApp, your messages are transmitted and processed through WhatsApp/Meta’s infrastructure under Meta’s own terms and privacy policy, which we do not control. Please review the WhatsApp Privacy Policy for information on how Meta processes your data.

7. How we share your information

We do not sell your personal information. We may share it with:

  • The business you are contacting, where we operate a WhatsApp number on behalf of another business, so they can respond to and manage your interaction.
  • Service providers and operators who process data on our behalf under written agreements (for example hosting and infrastructure providers), subject to appropriate safeguards.
  • Meta Platforms, as inherent to delivering messages over WhatsApp (see section 6).
  • Authorities, where required by law or to protect our rights.

8. Cross-border transfers

Because WhatsApp messaging is operated by Meta, some processing may occur outside South Africa. Where personal information is transferred across borders, we take reasonable steps to ensure it receives a level of protection consistent with POPIA.

9. Retention

We keep personal information only for as long as necessary for the purposes described in this policy, or as required by law. When information is no longer needed, it is securely deleted or de-identified, subject to any applicable legal hold or record-keeping obligation.

10. Security

We apply appropriate technical and organisational measures to safeguard personal information against loss and unauthorised access, use or disclosure, including access controls, encryption in transit, and malware scanning of received files. No system is completely secure, and we cannot guarantee absolute security.

11. Your rights under POPIA

Subject to applicable law, you have the right to: be notified about the processing of your information; request access to your personal information; request correction or deletion of information that is inaccurate, irrelevant, excessive or unlawfully obtained; object to processing, including for direct marketing; and withdraw consent at any time (which we honour going forward).

To exercise these rights, contact our Information Officer at privacy@mzansico.ai.

You also have the right to lodge a complaint with the Information Regulator (South Africa) — website inforegulator.org.za, email POPIAComplaints@inforegulator.org.za.

12. Children

Our services are not directed at children, and we do not knowingly process the personal information of children without the consent of a competent person as required by POPIA.

13. Changes to this policy

We may update this policy from time to time. The “Last updated” date above reflects the latest version, and material changes will be communicated where appropriate.

14. Contact us

For any privacy question or request, contact us at privacy@mzansico.ai or on (+27) 31 816 9399.