Privacy Policy.

AXIOM WEB (PTY) LTD (registration 2026/177931/07), trading as AXIOM, builds websites, booking tools and WhatsApp assistants for South African businesses. This policy explains how we handle personal information under the Protection of Personal Information Act 4 of 2013 (POPIA).

For our own clients and enquiries, we decide what is collected and why, so we are the responsible party. When we run a website, booking page or WhatsApp assistant for a client business, that business is the responsible party for its customers’ information and we process it on its behalf, only for that service, as its operator.

To answer enquiries, provide and bill for our services, run the bookings and replies a business has asked its assistant to handle, alert the business owner about bookings and conversations that need them, and meet our legal obligations. We don’t sell personal information and we don’t use it for advertising.

We use a small number of service providers, each only for its part of the service: Vercel (hosting), Supabase (database), Paystack (payments), Resend and Zoho (email), Meta (WhatsApp messaging), Anthropic (the AI that writes the assistant’s replies — it doesn’t use the conversations to train its models), Twilio (phone numbers and calls), ElevenLabs (the voice that answers calls and the transcription of them) and Hookwave (notifications). Some of them store or process information outside South Africa; we only use providers bound by data-protection terms that give it protection comparable to POPIA, as section 72 requires.

Only as long as the service needs it. Billing records are kept for five years because tax law requires it. WhatsApp conversations, call transcripts, requests and bookings are kept while the business uses its assistant and removed when it stops, or sooner if the business or you ask. ElevenLabs, which handles the calls, keeps its own copy of each call’s transcript for 40 days, so problems with a call can be looked into, and then deletes it. It doesn’t record the audio.

Information is encrypted in transit, access is limited to the two of us who run AXIOM, admin access needs two-factor sign-in, and passwords are stored only as strong one-way hashes. If a breach ever affects your information, we will tell you and the Information Regulator as POPIA requires.

We only use cookies that keep you signed in to your account or the admin. There are no tracking, advertising or analytics cookies, and nothing is shared with ad networks — our visitor counts are made without cookies or personal data. Because these cookies are needed for the site to work, there’s no cookie banner to accept.

Our services are for businesses and the adults who run them, and we don’t knowingly collect information about children. If you think a child’s information has reached us, use the form below and we’ll delete it.

You can ask what information we hold about you, ask us to correct or delete it, and object to how it’s used. To stop a WhatsApp assistant messaging you, reply “stop” or ask the business. For anything about a business’s customers, we’ll pass your request to that business and help it respond. Use the form below, or email hello@axiomsolutions.dev. If you’re unhappy with our answer, you can complain to the Information Regulator at inforegulator.org.za.