Privacy Policy
Last updated: 16 September 2026
Habitaly ("we", "us", "our") provides AI-powered voice receptionist and messaging services for service businesses. This policy explains what data we collect, why, and how it's handled.
1. Who we are
Habitaly is operated by Afrocentric Industries Ltd. If you have questions about this policy, contact us at hello@habitalyafrica.com.
2. What we collect
From businesses we work with (our clients):
- Contact details (name, business name, phone, email)
- Business configuration details needed to run the AI agent (services offered, pricing, hours, booking rules)
- Billing information
From callers and WhatsApp contacts of our clients' businesses (end customers):
- Phone number
- Call audio and/or transcripts, or WhatsApp message content
- Any details volunteered during the conversation (name, appointment preferences, enquiry details)
From visitors to habitalyafrica.com:
- Standard website analytics (pages visited, general location, device type)
- Demo conversations with our AI agent, if you choose to try it
3. Why we collect it
- To operate the voice and WhatsApp agents on behalf of our clients (answering calls/messages, booking appointments, passing details to the business owner)
- To improve and maintain the accuracy of the AI agent for each client
- To bill clients for the service
- To respond to enquiries and provide support
- To meet legal obligations
4. Legal basis (UK GDPR)
We process personal data under the following bases:
- Contract — to deliver the service our clients have signed up for
- Legitimate interests — to operate, secure, and improve the service
- Consent — where a caller or WhatsApp contact interacts directly with an agent, their engagement in that conversation is treated as consent to that specific exchange being processed for the purpose of responding to them
5. Who we share data with
- Our clients (the business the caller or WhatsApp contact was trying to reach) — call/message content and outcomes are shared with the relevant business
- Service providers who help us run the platform: cloud hosting and database (Supabase), AI model provider (Anthropic), telephony/WhatsApp messaging provider (Meta / WhatsApp Business Platform)
- We do not sell personal data to third parties
6. Data retention
- Call transcripts and WhatsApp messages are retained for as long as the client relationship is active, plus 12 months afterward for support and record-keeping, unless a shorter period is requested
- Client billing records are retained as required by UK tax law (typically 6 years)
7. Your rights
If you are based in the UK or EU, you have the right to:
- Request a copy of the personal data we hold about you
- Request correction or deletion of your data
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent
To exercise these rights, contact hello@habitalyafrica.com. If a request relates to a call or message with one of our clients' businesses, we may need to involve that business to fulfil it, since they are the ones the enquiry was directed to.
8. International transfers
Some of our service providers (including our AI model provider and messaging platform) may process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses.
9. Security
We use industry-standard measures (encrypted connections, access controls, restricted database permissions) to protect the data we hold. No system is completely secure, and we cannot guarantee absolute security.
10. Children
Our services are intended for business use and are not directed at children. We do not knowingly collect data from children.
11. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date above.
12. Contact
Questions or requests regarding this policy: hello@habitalyafrica.com
Afrocentric Industries Ltd, Nairobi, Kenya
This is a draft policy, not legal advice. It's worth having someone check UK GDPR compliance specific to voice/call recording law before relying on it, since call recording has additional disclosure rules in some jurisdictions our clients may operate in.