Privacy policy

1. Who we are

UHURU AI (Pty) Ltd (registration number 2025/660003/07), Oukraal Boulevard, Tyger Valley, Pretoria, Gauteng, South Africa, is the responsible party for personal information processed through uhuru.africa (and our earlier address, uhuruai.co.za) and our services. Our Information Officer is {{TODO: Information Officer name}}, reachable at info@uhuruai.co.za.

2. What we collect

• Contact details you give us: name, email, phone number and company, when you book a consultation, send an enquiry or subscribe.
• Information about your business needs that you share in messages, the savings estimator or consultations.
• Chatbot conversations, if you use the chat assistant on our website.
• Basic, cookieless analytics about how the website is used (pages viewed, approximate region, device type). We do not use advertising cookies.
• A small number of strictly necessary cookies, for example to remember your theme preference and protect forms from abuse.

3. Why we use it

We only use personal information for specific, lawful purposes:

• To schedule and hold consultations, and send confirmations, reminders and changes.
• To respond to enquiries and prepare proposals you ask for.
• To send our newsletter, only if you opted in and confirmed your subscription (double opt-in).
• To improve our services and the accuracy of our chat assistant.
• To meet legal, tax and accounting obligations.

We rely on your consent, the performance of a contract or steps towards one, our legitimate interests, or legal obligations, as POPIA allows.

4. Consent and direct marketing

Every form that collects personal information asks for your consent and records when it was given. Marketing emails are only sent after you confirm your subscription, and every email includes a one-click unsubscribe link. You can withdraw consent at any time.

5. Who we share it with

We never sell personal information. We share it only with operators who help us deliver our services, under written agreements that require them to protect it:

• Hosting and database providers (for example Vercel and Supabase).
• Email delivery (Resend) and payment processing (Paystack).
• AI model providers that power our chat assistant (Anthropic), which process messages to generate replies.
• Spam and abuse protection (Cloudflare Turnstile).

Some of these providers process information outside South Africa. Where that happens we rely on safeguards that offer protection comparable to POPIA, as section 72 requires.

6. How long we keep it

• Leads and enquiries: up to 24 months after our last contact, unless you become a client.
• Client records and invoices: as long as the law requires (generally five years for financial records).
• Chatbot transcripts: 12 months, then automatically deleted.
• Newsletter subscriptions: until you unsubscribe.

7. How we protect it

We use encryption in transit, strict access controls (including multi-factor authentication for staff), row-level security in our database, hashed access tokens and regular backups. If a security compromise affects your information, we will notify you and the Information Regulator as POPIA requires.

8. Your rights

Under POPIA you may:

• Ask whether we hold personal information about you and request a copy.
• Ask us to correct or delete your information.
• Object to processing, including for direct marketing.
• Withdraw consent at any time.
• Complain to the Information Regulator (inforegulator.org.za).

To make a request, email info@uhuruai.co.za with the subject “POPIA request”. We will verify your identity and respond within a reasonable time, normally 30 days.

9. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page. Questions? Contact us.