1. Introduction
This Privacy Policy explains how Tintsumi Noid Systems (Pty) Ltd (“we”, “us”, “our”), trading as CerebroNovus, handles personal information.
It covers (a) information about Client users of the Platform, and (b) how we process End-user information on behalf of Clients when they use WhatsApp through our Platform.
South Africa’s Protection of Personal Information Act 4 of 2013 (POPIA) is our primary privacy framework. Where other laws apply, we will follow them as required.
2. Responsible party and operator
Client account data (for example your staff names and login emails): we are typically the responsible party for that information when we manage access to the Platform.
End-user WhatsApp conversations, contacts, and related message data processed for your programme: you (the Client) are typically the responsible party. We act as your operator and process that information to provide the Platform on your instructions.
Meta / WhatsApp also processes messaging data under Meta’s terms and policies when messages travel on WhatsApp.
3. What we collect
Client and user account information
- Name, email address, role, and organisation details
- Invite and authentication records
- Billing and commercial contact details where relevant
- Support tickets and demo request messages
- Product usage logs needed to operate and secure the service
WhatsApp programme information (on behalf of Clients)
- Phone numbers and profile names shared via WhatsApp
- Message content and media sent or received in connected conversations
- Chatbot flow state, labels, and captured fields configured by the Client
- Template and WhatsApp Flow related metadata
- Inbox assignment, handoff, and delivery status information
Technical information
- IP address, device/browser type, and approximate location derived from network data
- Security logs, error reports, and performance metrics
4. How we use information
We do not sell personal information. We do not use Client End-user conversation content to train public AI models for unrelated third parties.
Optional AI reply features (where enabled) process relevant conversation context to generate a response for that Client’s programme, subject to the Client’s configuration and any model-provider terms.
- Provide, maintain, and secure the Platform
- Authenticate users and manage invites, roles, and workspaces
- Deliver WhatsApp messaging features the Client configures (bots, inbox, templates, flows)
- Provide support, onboarding, and operational reporting agreed with the Client
- Improve reliability and prevent abuse or fraud
- Meet legal obligations and enforce our Terms
5. POPIA grounds we rely on
Depending on the activity, processing may be necessary for a contract with you, for legitimate interests in running a secure B2B service, for compliance with law, or based on consent where consent is the appropriate ground (for example certain End-user marketing or document collection flows that the Client designs).
Clients must ensure they have a lawful basis to message End users and to instruct us to process their information.
7. Security
We use administrative, technical, and organisational measures appropriate to the risk, including access controls, encryption in transit for platform traffic, and monitoring.
No method of transmission or storage is perfectly secure. Clients should also apply least-privilege access inside their workspace and protect invite credentials.
8. Retention
We keep personal information only as long as needed for the purposes above, for the Client’s configured retention needs, and for legal, accounting, or dispute requirements.
When a pilot or contract ends, we will delete or return operator-held End-user data as agreed in writing, subject to backups and legal holds.
9. Your rights
Under POPIA, data subjects may have rights to access, correct, delete, or object to certain processing, and to complain to the Information Regulator.
If you are a Client user, contact us at the email below. If you are an End user who messaged a Client on WhatsApp, contact that Client first — they are usually the responsible party. We will support Clients with operator requests as required.
- Privacy requests: info@cerebronovus.ai
- Support: support@cerebronovus.ai
10. Children
The Platform is built for business customers. It is not directed at children. Clients must not knowingly use the Platform to target children unlawfully.
12. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change. Material updates will be communicated where practical by email or in-product notice.
13. Contact
Organisation: Tintsumi Noid Systems (Pty) Ltd
Product: CerebroNovus
Email: info@cerebronovus.ai
Jurisdiction: Republic of South Africa
This page is provided for transparency about how CerebroNovus works. It is not legal advice. For a signed contract, order form, or data processing agreement, contact info@cerebronovus.ai.