Privacy Policy

TYDZA provides online booking, appointment-management and customer-communication software for service businesses.

This Privacy Policy explains how personal information is handled when you create a TYDZA account, operate a business through TYDZA, make a booking with a business using TYDZA, receive booking-related communications, contact support or otherwise interact with the service.

TYDZA aims to process personal information in accordance with applicable South African data-protection requirements, including the Protection of Personal Information Act, 2013 (POPIA), where applicable.

The information we process depends on how you use TYDZA.

For business users, information may include your name, email address, account details, business name, business settings, services, prices, availability, booking configuration, subscription information and information required to operate and secure your account.

When a customer makes a booking, information may include the customer's name, phone number, selected service, appointment date, appointment time, booking status and other information reasonably necessary to create, manage or change the appointment.

We may also process technical information such as device, browser, IP address, security, diagnostic and usage information where reasonably necessary to operate, secure and improve the service.

TYDZA may use personal information to:

• create and manage user accounts;
• authenticate users and protect account security;
• create, display and manage bookings;
• provide booking information to the relevant business and customer;
• send booking confirmations, reminders, cancellations, rescheduling notices and other appointment-related messages;
• provide customer and business support;
• process and manage subscriptions and billing;
• detect misuse, fraud, security threats and technical issues;
• maintain, troubleshoot and improve TYDZA; and
• comply with applicable legal obligations.

Businesses using TYDZA may receive and manage personal information submitted by their customers when creating or managing appointments.

Each business is responsible for its own lawful use of customer information and for using that information only for appropriate business purposes, such as providing requested services, managing appointments, communicating with customers and maintaining legitimate business records.

Businesses are also responsible for providing any privacy notices, obtaining any consent or establishing any other lawful basis required for their own processing activities.

TYDZA may use supported messaging services, including WhatsApp, to send transactional or service-related communications connected with a booking or use of the platform.

These messages may include booking confirmations, appointment reminders, cancellation confirmations, rescheduling confirmations, service updates and customer-support communications.

To provide WhatsApp functionality, relevant information may be transmitted to or processed by Meta Platforms and WhatsApp in accordance with their applicable terms, privacy policies and platform requirements.

TYDZA's transactional messaging functionality is not intended to be used for unlawful or unsolicited marketing.

TYDZA relies on third-party providers to operate parts of the service. These providers may process information on our behalf or as required to provide their services.

Providers may include:

• Supabase for database, authentication and related infrastructure;
• Paystack for subscription and payment processing;
• Resend for transactional email delivery;
• Meta and WhatsApp for supported WhatsApp Business messaging functionality;
• hosting, security, monitoring and infrastructure providers used to operate TYDZA.

Information is shared with service providers only where reasonably necessary for TYDZA to provide, secure and operate the service or where otherwise permitted or required by law.

Subscription payments may be processed by third-party payment providers such as Paystack.

TYDZA does not need to store complete payment-card details in order to provide its subscription service. Payment providers may process payment information in accordance with their own terms and privacy practices.

Where applicable, TYDZA processes personal information where it is necessary to provide the service, perform contractual obligations, comply with legal requirements, pursue legitimate operational or security interests, or where an appropriate consent or other lawful basis exists.

TYDZA uses reasonable technical and organisational safeguards designed to protect information against unauthorised access, disclosure, loss, misuse or alteration.

These measures may include access controls, authenticated systems, restricted server-side credentials, encrypted transmission and other safeguards appropriate to the service.

No online service can guarantee absolute security. Users remain responsible for protecting their own account credentials and devices.

TYDZA retains information for as long as reasonably necessary to provide and secure the service, maintain legitimate business records, comply with legal obligations, resolve disputes and enforce agreements.

Retention periods may vary depending on the type of information, the purpose for which it is processed and applicable legal or operational requirements.

Some service providers used by TYDZA may store or process information outside South Africa.

Where applicable, TYDZA takes reasonable steps to use providers and arrangements designed to provide appropriate protection for personal information when information is processed internationally.

Subject to applicable law, you may have rights relating to personal information about you, including rights to request access, correction, deletion or restriction, to object to certain processing, or to ask questions about how your information is handled.

Some information may need to be retained where necessary for legal, security, fraud-prevention, accounting or legitimate operational purposes.

You may request deletion of personal information associated with your use of TYDZA, subject to any information that TYDZA is required or permitted to retain under applicable law.

To request deletion, visit our Data Deletion page for instructions on how to submit your request.

TYDZA is intended for use by businesses and customers arranging legitimate services. TYDZA is not designed as a service directed specifically to children.

We may update this Privacy Policy as TYDZA develops or as legal, regulatory, technical or operational requirements change.

The current version will be published on this page together with its latest update date.

If you have a privacy question, data request or concern relating to TYDZA, please contact: