Privacy policy

Last updated 30 September 2026

Draft for launch preparation. This text is a starting point and must be reviewed by a South African attorney (including POPIA obligations) before you go live.

Sanikya helps businesses (“customers”) respond to and follow up with their own enquiries. This policy explains what information we process and why.

Roles

For the enquiries a business receives through Sanikya, the business is the responsible party and Sanikya acts as its operator. For account and billing information about the business owner and team, Sanikya is the responsible party.

Information we process

AI processing

Conversation content and approved business information are sent to Anthropic (Claude) to generate replies, lead assessments and insights. We do not use API keys in the browser, and AI features are clearly identified to website visitors.

Service providers

To run Sanikya we use trusted providers who process data on our behalf: Anthropic (AI replies), Paystack (card and bank payments - we never see or store card details), Resend (email delivery) and our hosting and database provider. Each is used only for the purpose described.

Opt-out and retention

Customers can ask a business to stop contacting them at any time; Sanikya detects opt-out requests and halts automated follow-ups. Businesses can delete leads. Data is retained while the account is active and removed on request, subject to legal requirements.

Security

Businesses are isolated from one another, access is authenticated and authorised on the server, and sensitive actions are logged.

Contact

Questions or requests about personal information can be sent to the address published on our website.