Privacy Policy

Amagrow (Pty) Ltd · Last updated: 31 July 2026

Amagrow (Pty) Ltd ("AmaGrow", "we", "us") respects your privacy. This policy explains what personal information we collect, why we collect it, and how we protect it, in line with the Protection of Personal Information Act, 2013 (POPIA).

1. Who we are

AmaGrow is a South African digital marketing and AI automation company serving small businesses. We are the "responsible party" for personal information processed through this website and our services.

2. What we collect

• Contact details you give us, for example your name, phone number, email address and company name when you fill in a form, chat to one of our AI assistants, or contact us on WhatsApp.
• Service and billing information when you become a client, such as your business details, the services you subscribe to, and payment records. Card payments are processed by Paystack; we never see or store your full card number.
• Basic technical information, such as device type and pages visited, used to keep the site working, fast and secure.

3. Why we collect it

• To respond to your enquiry and provide the services you ask for.
• To set up, run, bill and support your subscription or project.
• To send you information about your service. We only send marketing where the law allows it, and you can opt out at any time.
• To protect the website and our systems against abuse and fraud.

4. Business lead data

Some AmaGrow products, such as our AI lead-finding tools, work with publicly listed business information, for example a company's name, listed phone number and address as published on public platforms like Google Maps. This is business contact information used for business-to-business purposes. We do not harvest or sell the personal information of private individuals (consumers), and we do not scrape data from behind logins.

5. Who we share it with

We do not sell your personal information. We share it only with service providers who help us run our business, under appropriate safeguards, including:

• Hosting and infrastructure providers (for example Netlify, Cloudflare and Supabase).
• Payment processing (Paystack) for subscriptions and invoices.
• Email and communication services used to deliver reports and respond to you.

Some providers process data outside South Africa. Where that happens, we use providers with security and privacy protections consistent with POPIA's requirements for cross-border transfers.

6. How long we keep it

We keep personal information only as long as needed for the purpose it was collected, or as required by law. For subscription products, client data is retained for 30 days after cancellation and then permanently deleted, unless the client asks us to delete it sooner or the law requires longer retention.

7. Security

We use reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS), access controls, secret management for system credentials, and isolation between client accounts on our platforms.

8. Your rights

Under POPIA you may ask us to confirm what personal information we hold about you, ask for it to be corrected or deleted, object to processing, and withdraw consent where processing is based on consent. To exercise any of these rights, contact us at the details above. You also have the right to complain to the Information Regulator of South Africa (inforeg.org.za).

9. Cookies and similar technologies

This site uses only what is needed for it to function properly and to protect it from abuse (for example security checks on our demo tools). We do not run third-party advertising trackers on this site.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page with its date at the top.