PRIVACY &
DATA POLICY

Liid Digital is an AI automation business registered in the Republic of South Africa, providing AI-powered voice agents, call routing systems, lead capture automation, and related digital services to businesses (referred to as "Clients").

Responsible Party (as defined under POPIA):

As the Responsible Party, Liid Digital determines the purpose and means of processing personal information and is accountable for ensuring compliance with POPIA.

We collect personal information in the following categories depending on the nature of your interaction with us:

From Callers and End Users (via AI Agents)

• Full name
• Phone number
• Reason for calling or enquiry details
• Booking or appointment information (where applicable)
• Voice recordings and transcripts of AI agent conversations

From Business Clients (Resellers and Direct Clients)

• Business name and contact details
• Email address and login credentials
• Billing and payment information
• Usage data (call minutes, agent activity)

From Website Visitors

• IP address and browser information (via server logs)
• Pages visited and time spent on site
• Contact form submissions (name, email, message)

Personal information collected is used strictly for the following purposes:

• To operate and deliver AI voice agent services on behalf of our Clients
• To capture and forward lead information to the relevant business Client
• To process bookings and appointments where instructed by the Client
• To send email notifications to business owners regarding new leads or enquiries
• To manage Client accounts, billing, and platform access
• To monitor usage, detect abuse, and maintain service quality
• To respond to enquiries submitted via our website or email
• To comply with legal obligations

We do not use personal information for unsolicited marketing, profiling, or any purpose beyond what is stated above without obtaining explicit consent.

Under POPIA, we process personal information on the following lawful grounds:

• Consent — where the data subject has voluntarily provided their information through interaction with an AI agent or contact form
• Contractual necessity — to fulfil our service agreements with business Clients
• Legitimate interest — to operate and improve our platform, prevent fraud, and ensure service continuity
• Legal obligation — where processing is required to comply with South African law

We do not sell personal information to third parties under any circumstances. Personal information may be shared in the following limited cases:

• With our Clients — lead and caller information captured by our AI agents is forwarded to the relevant business Client who contracted our services
• With service providers (Operators) — we use third-party platforms including ElevenLabs (voice AI), OpenAI (language processing), Wanatel (telephony), and Hetzner (hosting). These parties process data strictly on our instruction
• With authorities — where required by law, court order, or regulatory authority

We retain personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law:

• Lead and caller records — retained for the duration of the Client's active contract plus 12 months
• Call transcripts and recordings — retained for 90 days unless the Client requests deletion
• Client account data — retained for the duration of the contract and up to 3 years thereafter for legal and billing purposes
• Website enquiries — retained for 12 months

Once the retention period expires, personal information is securely deleted or anonymised.

Under POPIA, data subjects have the following rights:

• Right to access — you may request a copy of the personal information we hold about you
• Right to correction — you may request that inaccurate or outdated information be corrected
• Right to deletion — you may request that your personal information be deleted, subject to legal retention requirements
• Right to object — you may object to the processing of your personal information in certain circumstances
• Right to lodge a complaint — you may lodge a complaint with the Information Regulator of South Africa

To exercise any of the above rights, contact us at ryan@liiddigital.co.za. We will respond within 30 days.

Liid Digital implements appropriate technical and organisational measures to protect personal information against unauthorised access, loss, destruction, or disclosure. These include:

• Encrypted data transmission using HTTPS/TLS across all services
• Password hashing using industry-standard algorithms (bcrypt)
• JWT-based authentication with expiring tokens for platform access
• Access controls limiting data access to authorised personnel only
• Regular backups and server monitoring
• Hosting on ISO-certified infrastructure (Hetzner)

In the event of a data breach that poses a risk to data subjects, we will notify the Information Regulator and affected parties as required by POPIA.

Our main website (liiddigital.co.za) does not use tracking cookies or third-party analytics tools. Our client platform (app.liiddigital.co.za) uses local browser storage solely to maintain your login session. No personal information is shared with advertising networks.

Our services involve the use of artificial intelligence to process voice conversations. By interacting with an AI agent powered by Liid Digital, you acknowledge that:

• Your voice and the content of your conversation will be processed by AI systems to understand and respond to your enquiry
• A transcript of the conversation may be generated and stored
• Your contact details and enquiry may be forwarded to the business you are contacting
• You are interacting with an automated AI system, not a human agent

All AI processing is conducted for the sole purpose of delivering the service requested and forwarding your enquiry to the relevant business.

We may update this Privacy and Data Policy from time to time to reflect changes in our services, legal requirements, or operational practices. The date at the top of this page will always reflect the most recent revision. We encourage you to review this page periodically. Continued use of our services after changes have been published constitutes acceptance of the updated policy.

For any questions, requests, or complaints relating to this policy or the handling of your personal information, please contact our Information Officer: