Privacy Policy

POPIA distinguishes between a responsible party (who decides why and how personal information is processed) and an operator (who processes it on someone else's behalf). Raved acts in both roles:

• For your business account, we are the responsible party. This covers the information you give us when you sign up and manage your account.
• For your customers' information, we act as your operator. Your business is the responsible party for your customer data, and you are responsible for having a lawful basis to contact those customers. We process that information only on your instruction and only to provide the service.

From business owners and staff:

• Business name, owner name and the WhatsApp numbers authorised to send requests.
• Login email address and a securely hashed password.
• Your Google review page details and your selected plan.
• A payment reference from our payment provider. We never see or store your full card details.

From your customers, on your behalf:

• The mobile number you provide, and an optional first name.
• Their response to the review request, and any private feedback they choose to send.

Automatically:

• Message delivery and read events from the WhatsApp Business Platform.
• Basic technical logs needed to operate and secure the service.

• To send a single review invitation to a customer after a completed job.
• To route positive responses to your Google review page and private feedback to you.
• To operate your account, provide statistics and deliver monthly reports.
• To take payment, provide support and comply with our legal obligations.

We do not sell personal information, and we do not use your customers' information for our own marketing.

Any customer may reply STOP to opt out. Once they do, their number is added to a permanent suppression list that is checked before every send, and they will not receive further messages. This applies across all businesses using Raved.

We keep customer mobile numbers for no longer than twelve months, after which they are automatically deleted. Suppression (opt-out) records are kept for as long as necessary to honour opt-out requests. Business account information is kept for the life of your account and for a reasonable period afterwards to meet legal, tax and accounting obligations.

We share information only with the service providers (operators) that make Raved work. Each is bound to protect it and to use it only to provide their service to us:

• Meta Platforms (WhatsApp Business Platform), to deliver messages.
• PayFast, to process payments securely.
• Our hosting and database providers, to run the application and store data.
• Google, to locate your business and read your public review count.

We may also disclose information where required by law, or to protect our rights, safety or property.

Some of our service providers store or process information on servers outside South Africa. Where this happens, we take reasonable steps to ensure the recipient is subject to laws, binding agreements or rules that provide an adequate level of protection, as required by section 72 of POPIA.

We use appropriate technical and organisational measures, including encryption of data in transit, hashing of passwords, signed webhooks and access controls. No method of transmission or storage is perfectly secure, but we work to protect your information and to address any breach in line with our POPIA obligations.

Subject to POPIA, you and your customers have the right to:

• Ask what personal information we hold and request a copy.
• Ask us to correct or delete personal information.
• Object to processing in certain circumstances.
• Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, contact our Information Officer at support@raved.co.za. Requests about a customer's information are directed to the business that sent the request, as the responsible party for that data.

The Information Regulator can be contacted at inforeg@inforegulator.org.za or via www.inforegulator.org.za.

We may update this policy from time to time. The date at the top shows when it was last revised. Material changes will be communicated through the service or by email.