🔒 Privacy Policy
Effective Date: 15 July 2024
Last Updated: 15 July 2024
Gatekeeper AI ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our platform.
📜 Compliance Statement
Gatekeeper AI complies with:
- Zimbabwe Data Protection Act [Chapter 11:12] – The principal legislation governing the protection of personal data in Zimbabwe.
- Meta (WhatsApp) Business Platform Terms – We adhere to Meta's policies for the use of WhatsApp Business API.
- Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) Guidelines – We follow best practices for electronic communications.
1. Information We Collect
When you use Gatekeeper AI, we collect the following information:
- Phone Number: Your WhatsApp phone number (to route complaints and send status updates).
- Message Content: The text, images, or location you send to our WhatsApp number.
- Complaint Details: The category, urgency, and location of your complaint.
2. How We Use Your Information
We use your information for the following purposes:
- Complaint Routing: To forward your complaint to the correct department or authority.
- Status Updates: To send you updates on the progress of your complaint.
- Performance Tracking: To monitor response times and improve service delivery.
- Legal Compliance: To comply with Zimbabwean laws and Meta's policies.
3. Legal Basis for Processing (Zimbabwe Data Protection Act [Chapter 11:12])
Under Section 9 of the Data Protection Act [Chapter 11:12], we process your data based on:
- Consent: By sending a message to our WhatsApp number, you voluntarily provide your information and consent to its processing.
- Public Interest: Processing your complaint serves the public interest of improving service delivery.
4. Data Security
We take data security seriously. We implement the following measures:
- Encryption: All data is encrypted in transit and at rest.
- Access Control: Only authorized personnel can access complaint data.
- Secure Hosting: All data is stored on secure servers.
- Data Retention: We retain complaint data for 6 months to allow for follow-up and resolution.
5. Your Rights (Sections 13-18 of the Data Protection Act)
Under the Data Protection Act [Chapter 11:12], you have the following rights:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can correct any inaccurate information.
- Right to Erasure: You can request that we delete your data by replying "STOP" or contacting us directly.
- Right to Object: You can object to the processing of your data.
- Right to Data Portability: You can request a copy of your data in a structured format.
6. How to Exercise Your Rights
To exercise any of your rights, you can:
- WhatsApp: Reply "STOP" to stop all communications or "DELETE" to request data deletion.
- Email: Contact us at privacy@gatekeeperai.co.zw.
7. Data Retention
We retain complaint data for 6 months from the date of resolution. After this period, data is automatically anonymized or deleted. We retain data for this period to:
- Allow for follow-up on unresolved complaints.
- Generate reports on service delivery performance.
- Comply with legal and regulatory requirements.
8. Sharing Your Data
We share your data only for the purpose of resolving your complaint:
- With Local Authorities: Your complaint is forwarded to the relevant department or MP.
- With Service Providers: We may share your data with WhatsApp (Meta) to facilitate message delivery.
- We do NOT sell or rent your data to third parties.
9. Meta (WhatsApp) Business Platform Compliance
Gatekeeper AI operates in full compliance with Meta's WhatsApp Business Platform Terms of Service. Key compliance points include:
- Opt-In Consent: Citizens who message our number are implicitly opting in to receive responses.
- No Spam: We only send messages related to complaints.
- Message Templates: All auto-replies use approved WhatsApp message templates.
- Rate Limiting: We adhere to Meta's rate limits to prevent abuse.
10. Children's Privacy
Our platform is not intended for children under 13. We do not knowingly collect data from minors.
11. International Data Transfers
Data may be processed on servers located outside Zimbabwe. However, we ensure that adequate safeguards are in place to protect your data.
12. Data Breach Notification (Section 20 of the Data Protection Act)
In the event of a data breach that affects your personal information, we will notify you and the relevant authorities within 72 hours as required by the Data Protection Act [Chapter 11:12].
13. Updates to This Policy
We may update this policy from time to time. We will notify users of significant changes via WhatsApp or email.
14. Complaints
If you believe we have violated your rights under the Data Protection Act [Chapter 11:12], you have the right to lodge a complaint with:
- Zimbabwe Data Protection Authority
- Postal and Telecommunications Regulatory Authority (POTRAZ)
15. Contact Us
If you have any questions about this Privacy Policy or your data rights, please contact us: