Privacy policy
This policy explains how Framwrx ("we", "us") handles personal information when you visit framwrxstudios.com, when you use a service we run for one of our clients, and when you work with us as a client. We follow the Protection of Personal Information Act 4 of 2013 (POPIA).
1. Who we are
Framwrx is an AI automation agency based in Cape Town, South Africa. We build and run automations for businesses, including AI voice assistants that call customers back, quoting systems and customer relationship management (CRM) software. You can contact us at hello@framwrxstudios.com.
2. Our role
When we run a service for a client business, that business decides why and how its customers' information is used. Under POPIA the client is the responsible party and Framwrx is the operator that processes the information on its behalf, under a written agreement. If you are a customer of one of our clients, you can also contact that business directly about your information.
3. Information we handle
- Enquiry details you submit on a client's form, such as your name, phone number, email address and suburb, and your consent to be called.
- Call information when our AI assistant calls you for a client, including the call recording, a written transcript and a short summary. You are told at the start of every call that it is recorded.
- Quote details you share on the call, such as your property type, electricity use, budget and timing, and the quote that is prepared for you.
- Client account details for the businesses we work with, such as staff names, work email addresses and login information.
- Website visits. Our website does not use advertising or tracking cookies. Our hosting provider may keep standard technical logs, such as IP addresses, for security.
4. How we use it
- To call you back about the enquiry you made, collect the details needed for a quote and answer your questions.
- To prepare a quote for the client business to review and send to you.
- To save the enquiry, calls and follow-ups in the client's CRM so their team can help you.
- To keep the service secure, fix problems and improve how it works.
We do not sell personal information, and we do not use it for advertising.
5. Google user data
Some of our automations connect to Google accounts that we or our clients authorise, using Google APIs for Gmail, Google Sheets, Google Drive and Google Docs. We use this access only to read and update the client's price lists, create and store quote documents, and send quote and notification emails on the client's behalf.
Framwrx's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve or train generalised AI or machine learning models, we do not use it for advertising, and we do not let people read it unless it is needed for security, to fix a problem, to follow the law, or with the account owner's permission.
6. Service providers
We use trusted providers to run our services. They process information only to provide their service to us. They include Vapi and Twilio (phone calls and voice AI), OpenAI (AI language processing), n8n running on our own server hosted by Hostinger (automations), Supabase (databases, hosted in Europe), Vercel (CRM hosting), Google (documents, spreadsheets and email) and Tally (online forms). Some of these providers store or process information outside South Africa. Where that happens, we rely on providers that are bound by data protection laws or agreements that give protection similar to POPIA.
7. How long we keep it
We keep enquiry, call and quote information for as long as the client business needs it to deal with your enquiry and meet its legal obligations, and as agreed with that client. Call recordings are deleted on the schedule agreed with each client. When a client stops using our services, we return or delete their information as set out in our agreement.
8. How we protect it
Information is encrypted in transit. Each client's CRM has its own separate database, and staff must log in with two-factor authentication. Access to our systems is limited to the people who need it, and our own accounts are protected with two-factor login.
9. Your rights
Under POPIA you can ask what personal information is held about you, ask for it to be corrected or deleted, and object to its use, including asking not to be called again. Send your request to the business you made the enquiry with, or to us at hello@framwrxstudios.com and we will pass it to the right business and help them respond. If you are unhappy with how your information was handled, you can complain to the Information Regulator of South Africa at inforegulator.org.za.
10. Changes to this policy
We may update this policy as our services change. The date at the top shows when it last changed.