Privacy Policy

1. Introduction

PopaSite ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you provide directly to us, including:

• Name and contact information (email address, phone number)
• Business information (business name, address, industry)
• Payment information (processed securely through Stripe)
• Account credentials and preferences

2.2 Automatically Collected Information

We automatically collect certain information when you visit our website:

• IP address and location data
• Browser type and version
• Pages visited and time spent on our site
• Referring website information
• Device information and operating system
• WhatsApp message content and metadata (when using WhatsApp Business API)
• Phone numbers and contact information from WhatsApp
• Message delivery and read receipts
• Business information from Google Places API (name, address, phone, reviews)
• Search queries and results from web search APIs
• AI-generated content and prompts sent to OpenAI

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our website services
• Process payments and manage subscriptions
• Create and manage your business website
• Generate AI-powered content using OpenAI
• Search for business information using Google Places and web search APIs
• Source and process images from stock photo services
• Communicate with you about your account and services
• Contact you via phone, email, SMS, or messaging platforms (WhatsApp, etc.) with your consent
• Send you marketing communications and promotional offers (with your consent)
• Process and deliver WhatsApp messages through Meta's WhatsApp Business API
• Provide customer support via WhatsApp messaging
• Improve our website and services
• Comply with legal obligations
• Prevent fraud and ensure security

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and conducting our business
• Meta Platforms (WhatsApp Business API): We share message content, phone numbers, and metadata with Meta to provide WhatsApp messaging services. Meta's privacy policy applies to their processing of this data.
• OpenAI: We share business information and prompts with OpenAI to generate AI-powered content for your website. OpenAI's privacy policy applies to their processing of this data.
• Google Services: We share business information with Google Places API and Google Maps to provide location-based services and business data. Google's privacy policy applies to their processing of this data.
• Stock Photo Services: We may share business information with Unsplash, Pexels, and other stock photo services to source relevant images for your website.
• Search Services: We share business queries with SerpAPI and other search services to gather business information and reviews.
• Email Services: We share your email address and communication preferences with Resend for email delivery services.
• Payment Processing: With Stripe for payment processing (they have their own privacy policy)
• Hosting Services: With Vercel for website hosting and content delivery
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.

6. Your Rights (New Zealand Privacy Act 2020)

Under the New Zealand Privacy Act 2020, you have the right to:

• Access your personal information we hold
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to processing of your personal information
• Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information provided below.

7. WhatsApp Business API and Meta Integration

We use Meta's WhatsApp Business API to provide messaging services. When you interact with us via WhatsApp:

• Your phone number and message content are shared with Meta
• Meta processes this data according to their Privacy Policy and Data Use Policy
• Message content is stored by Meta for delivery and may be retained for security purposes
• We may use your phone number to send you business-related messages
• You can opt out of WhatsApp messages by replying "STOP" or contacting us directly

Meta's Role: Meta acts as a data processor for WhatsApp messaging services. Meta's privacy policies and terms apply to their processing of your data. You can review Meta's policies at facebook.com/privacy/policy.

8. Marketing Communications and Consent

We may contact you for marketing purposes via:

• Phone calls (with your express consent)
• SMS/text messages (with your express consent)
• WhatsApp and other messaging platforms (with your express consent)
• Email marketing (with your consent or if you're an existing customer)

You can withdraw your consent at any time by:

• Replying "STOP" to any SMS or WhatsApp message
• Unsubscribing from email communications
• Contacting us directly to opt out of phone calls
• Updating your communication preferences in your account settings

We will honor your opt-out requests within 10 business days.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. You can control cookie settings through your browser preferences. Some features of our website may not function properly if cookies are disabled.

10. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. When you cancel your account, we will delete your personal information within 30 days, unless we are required to retain it for legal purposes.

11. International Data Transfers

Your information may be transferred to and processed in countries other than New Zealand, including the United States where Meta is located. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: