Skip to content
ZAIQZAIQ

Privacy

Privacy policy and POPIA

This privacy policy explains how ZAIQ handles personal information on zaiq.ai, aligned with the Protection of Personal Information Act (POPIA). Plain English, no dark patterns, and we collect as little as the job needs.

Last updated 8 November 2026

Who we are

ZAIQ is an AI engineering studio based in Johannesburg, South Africa, and the responsible party for personal information collected through this site. Questions about this policy, or about your information, go to hello@zaiq.ai.

What we collect

Only what a given interaction needs:

  • Contact form. Your name, email address and the message you send, so we can reply and scope your enquiry.
  • The live problem-solver. The business problem you type into the demo, used to generate the response in front of you.
  • The Lab demos. What you type into a demo (for example a business name, a service and an area, a website address or a question) is sent to the services that run it, such as AI model providers and our web data service Skryp, to produce your result. We keep those inputs, without your contact details, for 30 days to improve the demos and stop abuse. WhatsApp chats with our assistant are handled under the same purpose as the contact form.
  • Aggregate analytics. Privacy-friendly, cookie-less analytics (Plausible) that count page views, referrers and taps on our WhatsApp and email links and sent contact forms, in aggregate. No cross-site tracking, no advertising profiles, no selling of data.
  • Ad measurement (OpenAI). We advertise in ChatGPT. When you arrive from one of those ads, OpenAI's measurement tag on this site sets its own cookies and reports three actions back to OpenAI: tapping a WhatsApp link, tapping an email link, and sending the contact form. Our server sends OpenAI the same three actions as a backup, with your IP address and browser type, in case your browser blocks the tag; OpenAI counts each action once. That lets us see which ads bring real enquiries. OpenAI's tag also hashes (scrambles) an email address, phone number or name you type into a form, in your browser, so it can match the action to a ChatGPT account without receiving the plain text. It never sends what you write in a message. You can switch it off below.
  • Security signals. Standard request data (such as your IP address) and a Cloudflare bot check, used only to keep the site and forms from being abused.

Why we collect it, and the lawful basis

We use your contact details and message for one thing: to respond to you and, if you want, to scope and quote a build. That is processing you have asked for. Security data is processed on the basis of our legitimate interest in protecting the site, and analytics are aggregate and not tied to you as an individual. Ad measurement runs on our legitimate interest in knowing which of our ads work, and you can switch it off at any time (see below). We never sell your information.

How it is stored and who can see it

Contact submissions are stored in Cloudflare's key-value store and emailed to the ZAIQ inbox so a person can reply. Our only operators are the infrastructure providers that run the site for us, principally Cloudflare (hosting and email routing) and Plausible (aggregate analytics), plus OpenAI for ad measurement as described above. We do not share your information with anyone else, and we do not pass it to data brokers.

Switch off ad measurement

OpenAI ad measurement runs only on zaiq.ai. It stays off if your browser sends Global Privacy Control, and you can turn it off for this browser here:

How long we keep it

We keep enquiry information only as long as we need it to deal with your request and to keep a reasonable record of the conversation, then we remove it. If you ask us to delete your information sooner, we will, unless we are required to keep it by law. Aggregate analytics are not linked to you and are retained in summary form.

Your rights under POPIA

You have the right to:

  • ask what personal information we hold about you, and get a copy;
  • have it corrected if it is wrong, or deleted when we no longer need it;
  • object to processing, and withdraw any consent you have given;
  • complain to the Information Regulator of South Africa.

To exercise any of these, email hello@zaiq.ai and we will action it.

Security

The site is served over HTTPS with strict transport security, the contact and demo endpoints are rate-limited and bot-gated, and we collect the minimum information needed. No system is perfectly secure, but we engineer this one to keep your information safe and out of the wrong hands.

Contact and complaints

For anything in this policy, email hello@zaiq.ai. You may also lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za. This policy is provided for transparency and is not legal advice.