Last updated: December 2026
Important: This Data Protection & Privacy Statement complies with South Africa's Protection of Personal Information Act (POPIA) and the European Union's General Data Protection Regulation (GDPR).
1. Introduction
This Data Protection & Privacy Statement explains how we collect, use, store, and protect your personal information when you use the Custi platform. We are committed to protecting your privacy and ensuring transparency in our data processing activities.
2. Who We Are
Business Software Craftsmen (BSC) is the product owner and data controller for the Custi platform. Custi is a Software-as-a-Service (SaaS) WhatsApp chatbot automation platform operated by BSC.
Contact Details:
- Company: Business Software Craftsmen (Pty) Ltd
- Platform: Custi WhatsApp Automation Platform
- Location: South Africa
- Contact: +27 87 265 6129
- Email: privacy@custi.africa
3. Data We Process
We process the following types of personal data:
Account Information:
- Name and contact details
- Business information
- Email addresses and phone numbers
- Payment and billing information
Platform Usage Data:
- WhatsApp message content and metadata
- Chatbot configuration and responses
- Usage analytics and performance metrics
- Technical logs and system information
Customer Data:
- End-user contact information processed through your chatbots
- Conversation history and message content
- Customer interaction data and preferences
4. How and Why We Process Data
We process personal data for the following purposes:
- Service Delivery: To provide and maintain the Custi platform
- Customer Support: To respond to inquiries and provide technical assistance
- Platform Improvement: To analyze usage and improve our services
- Billing and Payments: To process subscriptions and manage accounts
- Compliance: To meet legal and regulatory requirements
- Security: To protect against fraud and ensure platform security
5. Legal Basis for Processing
Under POPIA and GDPR, we process personal data based on:
- Contractual Necessity: To fulfill our service agreement with you
- Legitimate Interest: For platform improvement and security
- Consent: Where you have provided explicit consent
- Legal Obligation: To comply with applicable laws and regulations
6. Data Sharing & Sub-processors
We may share your data with:
- Meta (WhatsApp): For WhatsApp Business API functionality
- Cloud Service Providers: For hosting and infrastructure
- Payment Processors: For billing and subscription management
- Analytics Providers: For platform performance monitoring
All third-party processors are bound by strict data protection agreements and comply with POPIA and GDPR requirements.
7. Data Retention
We retain personal data for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
Typically, we retain data for the duration of your subscription plus 7 years for compliance purposes, unless a longer retention period is required by law.
8. Data Security Measures
We implement comprehensive security measures including:
- Encryption: Data encrypted in transit and at rest
- Access Controls: Role-based access and authentication
- Regular Audits: Security assessments and vulnerability testing
- Staff Training: Regular privacy and security training
- Incident Response: Procedures for data breach management
9. Data Subject Rights
Under POPIA and GDPR, you have the right to:
- Access: Request copies of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Restriction: Limit how we process your data
- Portability: Receive your data in a structured format
- Object: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent where applicable
10. Cross-Border Data Transfers
When we transfer personal data outside South Africa or the EU, we ensure adequate protection through:
- Adequacy decisions by relevant authorities
- Standard contractual clauses
- Binding corporate rules
- Certification schemes and codes of conduct
11. Contact Information
For any data protection or privacy queries, contact us:
- Email: privacy@custi.africa
- Phone: +27 87 265 6129
- WhatsApp: +27 87 265 6129
- Address: Business Software Craftsmen, South Africa
You also have the right to lodge a complaint with the Information Regulator (South Africa) or your local data protection authority if you believe we have not handled your personal data appropriately.