1. Introduction

A-Game Business Consulting (Pty) Ltd (“A-Game Business,” “we,” “us,” or “our”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the A-Game Business App platform and related services.

We are fully committed to compliance with the Protection of Personal Information Act (POPIA) of South Africa and other applicable data protection laws.

By using our platform, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

Account Information: Name, email address, phone number, company name, job title, and password when you register
Business Information: Company details, industry, employee count, and business address
Financial Information: Invoicing details, payment information, expense records, and banking details you choose to connect
Customer Data: Information about your customers, leads, contacts, and suppliers that you store in our CRM and related modules
Team & HR Data: Employee records, payroll information, and performance data you manage through our platform
Social Media Data: When you connect a Facebook Page or Instagram Business Account, we store the OAuth access token and page details provided by Meta
WhatsApp Data: When you use the WhatsApp module, we store WhatsApp Business Account details, phone numbers, message content, delivery statuses, media files, and conversation records
Google Calendar Data: When you connect your Google Calendar in the Smart Scheduler module, we store an encrypted OAuth access token and refresh token, plus calendar event details (title, description, location, start/end time, and attendee email addresses) for events we create, read, or sync on your behalf
Communications: Messages, support tickets, and correspondence with our team

2.2 Information Collected Automatically

Usage Data: Features accessed, pages viewed, actions taken, and time spent on the platform
Device Information: IP address, browser type, device type, operating system, and unique device identifiers
Location Data: General geographic location based on IP address
Log Data: Server logs, error reports, and diagnostic information

2.3 Information from Third Parties

Integration Partners: Data from accounting software, banking services, or other tools you connect to A-Game Business
Payment Processors: Transaction confirmations and payment status from payment service providers

3. How We Use Your Information

We use your personal information to:

Provide, maintain, and improve the A-Game Business App platform
Create and manage your account
Process transactions and send related notifications
Deliver customer support and respond to enquiries
Publish social media posts on your behalf when you use the Social Media module
Send and receive WhatsApp messages on your behalf when you use the WhatsApp module
Send platform emails and marketing communications you are opted into at registration (see section 5)
Send administrative messages, updates, and security alerts
Personalise your experience and provide tailored recommendations through AngelAI
Analyse usage patterns to improve our services
Detect, prevent, and address technical issues and security threats
Comply with legal obligations and enforce our terms
Send marketing communications (with your consent)

4. Legal Basis for Processing (POPIA Compliance)

Under POPIA, we process your personal information based on the following lawful grounds:

Consent: Where you have given explicit consent for specific processing activities
Contractual Necessity: To perform our contract with you and provide our services
Legal Obligation: To comply with applicable laws and regulations
Legitimate Interest: For our legitimate business purposes, provided these do not override your rights

5. Email Opt-In on Registration & How to Opt Out

By registering an account on the A-Game Business platform you are automatically opted in to receive two categories of email from us:

Platform emails: automated emails the system sends based on your account activity. This includes your welcome email, a seven-email onboarding sequence spread across your first seven days, re-engagement nudges if you have not logged in for three or more days, subscription and trial expiry warnings, and low-stock inventory alerts. These emails exist to help you get value from the platform and to keep you informed about your account.
Marketing emails: campaign emails and newsletters sent to registered users through our Marketing module. These keep you informed about new features, promotions, events, and resources relevant to running your business.

5.1 Why Automatic Opt-In?

When you create an account, a corresponding contact record is created in our CRM with both Marketing Email Subscriber and Platform Email Subscriber set to Yes. This allows the platform to send you onboarding guidance and relevant communications from day one without requiring a separate sign-up step.

5.2 How to Opt Out

You can opt out of either or both categories at any time — independently of each other:

Platform emails: every automated platform email includes an unsubscribe link in the footer. Clicking it takes you to a public page (no login required) where, once confirmed, all automated platform emails stop immediately and permanently. This is recorded in our database and the system will never send you another automated platform email unless an administrator manually restores your subscription.
Marketing emails: every marketing campaign email includes an unsubscribe link in the footer. Clicking it takes you to a confirmation page where you can choose to opt out of marketing emails only, platform emails only, or both. You will be asked to select a reason before confirming. Your choice is recorded immediately and future campaign sends check this preference before every send.

Transactional emails (invoices, quotes, payment confirmations) are not gated by either opt-out. They are sent only in direct response to an action you or your client initiates and cannot be turned off via the unsubscribe system.

6. Social Media Permissions

When you connect a Facebook Page or Instagram Business Account, we request the following permissions via the Meta (Facebook) platform:

pages_manage_posts — to publish posts to your Facebook Page
pages_read_engagement — to read comments, reactions, and insights on your posts
pages_show_list — to list the Pages you manage so you can select which to connect
business_management — to access Pages managed through a business portfolio
instagram_business_basic — to read your Instagram Business profile
instagram_manage_comments — to read and respond to Instagram comments
instagram_business_manage_messages — to manage Instagram direct messages

We only use these permissions for features you explicitly activate. We do not sell or share your social media data with third parties. You can disconnect your accounts at any time from Marketing → Social → Accounts.

7. WhatsApp Business Permissions

When you activate the WhatsApp module, we request the following permissions via the Meta WhatsApp Business Platform:

whatsapp_business_messaging — to send and receive WhatsApp messages, upload and retrieve media, and manage message templates on behalf of your WhatsApp Business Account
whatsapp_business_management — to manage your WhatsApp Business Account settings, phone numbers, and message templates
whatsapp_business_manage_events — to log events such as purchases, add-to-cart actions, and leads against your WhatsApp Business Account for analytics purposes

We act as a Tech Provider on the Meta WhatsApp Business Platform. Each business customer on our platform owns their own independent WhatsApp Business Account linked to their own Meta Business Portfolio. We do not share WhatsApp message content between customers. WhatsApp message data is stored securely and used solely to provide the WhatsApp messaging features you activate.

You can deactivate WhatsApp at any time by going to Account → Phone & Calling → WhatsApp and removing your registered number. This will stop all WhatsApp sending and receiving through the platform.

8. Google Calendar Permissions

When you connect your Google Calendar in the Smart Scheduler module, we request the following permission via Google’s OAuth platform:

calendar.events (https://www.googleapis.com/auth/calendar.events) — to see, create, update, and delete events on your connected Google Calendar

We use this permission to keep your A-Game appointments in sync with your Google Calendar in both directions: appointments created, edited, or cancelled in A-Game are reflected on your Google Calendar, and events created, edited, or cancelled directly in Google Calendar are reflected back in A-Game.

Your OAuth access and refresh tokens are encrypted at rest and are never exposed to other users or shared with any third party other than Google itself (to make the authorised API calls on your behalf). We do not use this permission for any purpose other than appointment sync, and we do not read, use, or share the content of unrelated events already on your calendar beyond what is needed to detect scheduling conflicts and display your existing appointments.

You can disconnect your Google Calendar at any time from Scheduler → Booking Page → Connected Calendars → Disconnect. This immediately revokes A-Game’s access and stops all further sync in both directions; it does not delete appointments or events that were already synced prior to disconnecting.

9. Data Sharing and Disclosure

We do not sell your personal data to any third party — ever. Your data exists on our platform to serve you and your business. We treat it as a responsibility, not a commodity. Access to your data is restricted to the systems and personnel required to operate the platform. We share data only as described below.

9.1 Service Providers

We share data with the following named providers, only for the stated purpose:

Meta (Facebook / Instagram / WhatsApp) — when you use the Social Media module or WhatsApp module
Google — when you connect Google Calendar in the Smart Scheduler module, to sync appointments
Twilio — when you use the WhatsApp module or calling features, to route messages and calls
PayStack — when processing payments
Infrastructure providers — hosting, database, email, and analytics services required to run the platform

9.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

9.3 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request.

9.4 With Your Consent

We may share your information with third parties when you explicitly authorise us to do so.

10. Data Security

We implement robust security measures to protect your information, including:

HTTPS everywhere and industry-standard encryption for data in transit and at rest
Encrypted OAuth tokens; WhatsApp Business Account credentials (sub-account SIDs and tokens) are stored encrypted and never exposed to end users
Secure authentication and access controls
Regular security assessments and monitoring
Employee training on data protection practices
Incident response procedures

While we strive to protect your personal information, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

11. Data Retention

We retain your personal information only for as long as necessary to:

Provide our services to you
Comply with legal, accounting, or reporting requirements
Resolve disputes and enforce agreements
Support legitimate business operations

In practice, we retain your data for as long as your account is active. If you cancel your account, we delete your data within 30 days unless legal retention requirements apply. WhatsApp message history is retained for as long as your account is active and deleted within 30 days of account cancellation. When your data is no longer required, we securely delete or anonymise it.

12. User Data Deletion

You can request deletion of your data at any time by emailing info@agamebusiness.co.za. We will process your request within 30 days and confirm deletion by email.

To disconnect a connected Facebook or Instagram account and remove the associated access tokens, go to Marketing → Social → Accounts and click Disconnect.
To remove your WhatsApp Business Account from the platform, go to Account → Phone & Calling → WhatsApp and delete your registered number. This removes all associated WhatsApp sender data from our platform.
To disconnect your Google Calendar and remove the associated access and refresh tokens, go to Scheduler → Booking Page → Connected Calendars and click Disconnect.

13. Your Rights Under POPIA

As a data subject in South Africa, you have the following rights:

Right to Access: Request a copy of your personal information we hold
Right to Correction: Request correction of inaccurate or incomplete information
Right to Deletion: Request deletion of your personal information (subject to legal retention requirements)
Right to Object: Object to processing of your personal information for direct marketing
Right to Restrict Processing: Request limitation of processing in certain circumstances
Right to Data Portability: Receive your data in a structured, commonly used format
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, use the POPIA Compliance tools within your A-Game Business account settings, or contact our Information Officer at info@agamebusiness.co.za.

14. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Keep you signed in
Remember your preferences
Analyse how our platform is used
Improve performance and user experience

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality.

15. International Data Transfers

Your information may be processed and stored on servers located outside South Africa. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with POPIA requirements.

16. Children’s Privacy

The A-Game Business App is designed for business use and is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

17. Marketing Communications

With your consent, we may send you:

Product updates and new feature announcements
Tips and best practices for using A-Game Business
Educational content and business resources
Promotional offers and event invitations

You can opt out of marketing communications at any time by:

Clicking “Unsubscribe” in any marketing email
Updating your notification preferences in Settings
Contacting us directly at info@agamebusiness.co.za

18. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

Posting a notice on our platform
Sending an email or in-app notice to registered users
Updating the “Last Updated” date at the top of this policy

We encourage you to review this policy periodically. Continued use of the platform after changes constitutes acceptance of the updated policy.

20. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Information Officer
A-Game Business Consulting (Pty) Ltd
Email: info@agamebusiness.co.za
Phone: +27 (0)60 013 6383
Address: 9 The Straight Avenue, Fourways, Gauteng, 2191

For complaints that cannot be resolved directly, you may contact the Information Regulator of South Africa at:
Email: inforeg@justice.gov.za
Website: www.justice.gov.za/inforeg

21. Acknowledgement

By using the A-Game Business App, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.

This Privacy Policy should be read in conjunction with our Terms and Conditions.