Privacy Policy
Last updated: 2 August 2026
This policy explains how Buzzz, the email and SMS platform operated at buzzzmail.co.za ("we", "us"), collects and uses personal information. We process personal information in accordance with the Protection of Personal Information Act (POPIA) and, where applicable, the GDPR.
1. Information we collect
Account information. When you sign in with Google we receive your name, email address, and profile picture. If you connect Gmail sending, we store the OAuth tokens needed to send email on your behalf (scopes: gmail.send and gmail.settings.basic); we never read your mailbox.
Provider credentials. API keys and credentials you configure for email or SMS providers are stored encrypted (AES-256-GCM) and used only to send on your behalf.
Contact data you upload. Names, email addresses, phone numbers, and custom fields of your recipients. For this data you are the responsible party (controller); we process it only on your instructions to provide the Service.
Message and delivery data. Message content you send, delivery events (delivered, bounced, complained), open and click events collected via tracking pixels and wrapped links, and opt-out records (unsubscribes and SMS STOP replies), which we must retain to honour recipients' choices.
Technical data. Logs, IP addresses, and usage analytics that help us operate, secure, and improve the Service.
2. How we use information
- to provide the Service: sending, delivery tracking, contact management;
- to meter usage and process billing;
- to prevent abuse, enforce suppression and opt-out lists, and protect deliverability;
- to monitor, debug, and improve the platform;
- to comply with legal obligations.
We do not sell personal information, and we do not use your contacts or message content for advertising.
3. Sharing
We share data only with the service providers needed to operate the platform: message delivery providers (for example Amazon SES for email and BulkSMS for SMS), cloud hosting and storage, payment processing, and error/analytics tooling. Each processes data only to provide its service to us. We may disclose information if required by law.
4. International transfers
Delivery providers may process messages in data centres outside South Africa (for example AWS regions abroad). Where personal information leaves South Africa we rely on providers that offer an adequate level of protection consistent with POPIA section 72.
5. Retention
We keep account and message data while your account is active and as needed for legal and billing purposes, after which it is deleted or anonymised. Suppression and opt-out records are retained even after related contacts are deleted, because they exist to prevent future unwanted messages.
6. Security
Data is encrypted in transit (TLS) and sensitive credentials are encrypted at rest. Access to production systems is restricted. No system is perfectly secure; if we become aware of a breach affecting your personal information we will notify you and the Information Regulator as required by POPIA.
7. Your rights
You may access, correct, or delete your personal information, object to processing, or lodge a complaint with the Information Regulator (South Africa). Most account data can be managed directly in the dashboard; for anything else, contact us. If you are a recipient of messages sent through Buzzz, the sender is the responsible party for your data — but you can always unsubscribe via the link in any marketing email or by replying STOP to an SMS, and we enforce that choice platform-wide.
8. Changes
We may update this policy from time to time. Material changes will be announced by email or in the dashboard before they take effect.
9. Contact
Privacy questions: privacy@buzzzmail.co.za.