Privacy policy
Last updated 10 November 2026
Buza (a trading name of the company named at the bottom of this page) provides businesses with a WhatsApp assistant that answers questions from their staff using the business's own systems. This policy explains what information Buza handles and why.
Who this applies to
Buza is used by businesses for their approved staff. The business decides who may use it and what information each person may see. Buza processes that information on the business's behalf.
What we process
- The phone number and name of each approved staff member, and their role.
- Messages sent to the business's WhatsApp number, and Buza's replies.
- A request log of who asked, which type of information was looked up, and when. The content of answers is not stored in this log.
- Information fetched live from the business's systems to answer a question.
This website
The Buza website uses no cookies, analytics or tracking. Fonts are loaded from Google Fonts, which receives your browser's IP address to deliver them. If you email us, we use your message only to reply and to discuss Buza with you.
How we use it
Only to check who is asking, check what they are allowed to see, answer their question, keep the service secure, and investigate problems.
Who else is involved
- Meta (WhatsApp) delivers the messages.
- Anthropic (our AI provider) reads the question and the fetched result to write the reply. It does not use this data to train its models and deletes it within 30 days.
- Render (our hosting provider) runs the Buza server.
These providers may process information outside South Africa, mainly in the United States and Europe. We only use providers bound by data protection terms, as POPIA requires for transfers abroad.
We do not sell personal information or use it for advertising.
How long we keep it
Recent messages are kept briefly in memory so follow-up questions make sense, then discarded. Request logs are kept for 12 months, or as agreed with the business. Messages also remain in WhatsApp chats under WhatsApp's own terms.
Your rights
You can ask for access to, correction of, or deletion of your personal information, or object to its processing, as provided by the Protection of Personal Information Act (POPIA). Contact your employer, or contact us at hello@getbuza.co.za. See also our data deletion instructions.