Privacy Policy

Last updated: April 2025

1. Introduction

QuietGrowth ("we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including our Google review automation, booking system, and AI chatbot products.

This policy is compliant with the Protection of Personal Information Act, 2013 (POPIA) of South Africa. By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following types of information:

  • Business information: Business name, address, phone number, email address, Google Business Profile details, and website URL provided during onboarding.
  • Customer information (for reviews): Customer names and email addresses provided by our clients for the purpose of sending review requests.
  • Booking details: Customer names, email addresses, phone numbers, and appointment details submitted through our booking system.
  • Chatbot conversations: Messages exchanged between website visitors and our AI chatbot, including any personal information voluntarily provided during those conversations.
  • Account information: Email address, name, and login credentials for our dashboard.
  • Usage data: Analytics about how you use our dashboard and services.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain our services
  • Send review request emails on behalf of our clients
  • Process and manage bookings
  • Power AI chatbot conversations
  • Communicate with you about your account and services
  • Improve and develop our products
  • Process payments and billing
  • Comply with legal obligations

4. Legal Basis for Processing (POPIA)

Under POPIA, we process personal information based on the following lawful grounds:

  • Consent: Where you have given us explicit consent to process your information.
  • Contract: Where processing is necessary to fulfil our contractual obligations to you.
  • Legitimate interest: Where processing is necessary for our legitimate business interests, provided these do not override your rights.
  • Legal obligation: Where we are required by law to process your information.

5. Third-Party Services

We use the following third-party service providers to operate our platform:

  • Supabase: Database hosting and authentication (data may be stored outside South Africa).
  • Resend: Email delivery service for review requests and transactional emails.
  • Paystack: Payment processing for subscription billing (PCI-DSS compliant).
  • Anthropic: AI language model provider powering our chatbot conversations.

These providers have their own privacy policies and data protection measures. We ensure that all third-party processors handle your data in accordance with POPIA requirements.

6. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations
  • Resolve disputes and enforce agreements

Review request data is retained for 12 months after sending. Chatbot conversation logs are retained for 6 months. Account data is retained for the duration of your subscription and for 30 days after cancellation. You may request earlier deletion at any time.

7. Your Rights Under POPIA

As a data subject under POPIA, you have the right to:

  • Access your personal information that we hold
  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal information
  • Object to the processing of your personal information
  • Withdraw consent at any time
  • Lodge a complaint with the Information Regulator of South Africa

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. This includes encryption of data in transit (TLS) and at rest, access controls, and regular security reviews.

9. Cross-Border Transfers

Some of our third-party service providers may store or process data outside of South Africa. In such cases, we ensure that appropriate safeguards are in place as required by POPIA Section 72, including ensuring the recipient country has adequate data protection laws or that binding agreements are in place.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or want to lodge a complaint, please contact us at:

Email: hello@quietgrowth.to
Company: QuietGrowth
Location: South Africa