Privacy Policy

1. What we collect

2. How your conversations are processed

When you ask Zuvo something, the message is sent to Anthropic's Claude API to generate a reply. Per Anthropic's API terms, this content is not used to train Anthropic's models. We don't sell your data, and we don't use your business's content to train any third-party AI model.

Voice typing. If you tap a microphone button, your browser's built-in speech recognition turns what you say into text. That service is run by your browser's maker (for example Google for Chrome, Apple for Safari). Zuvo never receives or stores the audio, only the text that you choose to submit.

3. Who we share data with

• Anthropic, PBC — processes message content to generate AI responses.
• Paystack — processes payment details to bill your subscription.
• Render, Netlify and Supabase — Render and Netlify host the application; Supabase hosts the database.

We don't sell personal information, and we don't share it with anyone else except where required by law.

4. Your rights

Under POPIA (and GDPR, if it applies to you), you can ask us to: give you a copy of your data, correct it, delete it, or stop processing it. Email operations@zuvoai.co.za to make a request — we'll respond within the time your applicable law requires.

5. Data retention

We keep account and billing records for as long as your account is active and for 5 years after closure to meet accounting and legal obligations. Chat content is retained for 12 months to let you review past conversations, then deleted.

6. International transfers

Our AI provider and hosting infrastructure may process data outside South Africa — Anthropic's Claude API runs in the United States, and our hosting providers may operate servers in other jurisdictions. Where this happens, we rely on those providers' standard contractual clauses and security certifications to protect your data during such transfers.

7. Security

Passwords are hashed, not stored in plain text; connections to the Service are encrypted in transit (HTTPS); access to the database is restricted. No system is 100% secure, and we'll notify affected users and the Information Regulator as required by law if a breach occurs.

8. Cookies

We use a login token stored in your browser to keep you signed in — this is essential to the Service and isn't optional.

With your consent, given through the cookie banner shown on your first visit, we also use Google Analytics and the Meta (Facebook/Instagram) Pixel to understand how visitors use this site and whether our ads led to a signup: which pages are viewed, general location (from IP address, not exact), device and browser type, how you arrived here, and — for the Meta Pixel specifically — whether you came from a Meta ad and whether you subsequently created an account, so ad spend can be measured and optimised. We don't send your name, email, or any content you submit to Zuvo to Google or Meta, and this data isn't used to identify you personally. You can decline analytics cookies in the banner, or change your mind at any time by clearing your browser's local storage for this site. See Google's Privacy Policy and Meta's Privacy Policy for how they handle this data.

With the same consent, on our public marketing pages only (the homepage, pricing, blog and free tools, never inside your account or on a quote link sent to a client), we use Microsoft Clarity to see anonymised heatmaps and recordings of how visitors use those pages, so we can fix confusing parts. Text you type into forms on those pages is masked in recordings. You can decline in the cookie banner at any time.

9. Contact / Information Officer

Information Officer, operations@zuvoai.co.za.