BizChat, business chat for teams
Effective date: 15 October 2026
BizChat is a business messaging, team management and customer support app provided by BZ Tracking Solution (Pty) Ltd (registration number 2014/231948/07), a South African company. It is available as a web app at app.bizchat.chat and as a mobile app.
BizChat is used by businesses (our business customers) and their staff. This policy explains what personal information BizChat processes, why, who else receives it, where it is stored, how long it is kept, and the rights you have under the Protection of Personal Information Act, 2013 (POPIA).
When your employer or the business you work with uses BizChat, that business is the responsible party for the personal information in its BizChat workspace: its staff's accounts and messages, and the records it keeps about its own customers. We process that information as its operator, only to provide BizChat and only on its instructions. We do not use it for our own purposes.
We are the responsible party for the information we need to run our own business: the business customer's account and billing contacts, and our support relationship with you.
Where your employer uses BizTrack, BizChat also delivers notices from BizTrack's systems to you as messages: for example, that a leave application was made, approved or declined, and photo albums from store visits. A leave notice states the type of leave, its dates and its duration. Where that is sick or maternity leave, it is information about health, which POPIA treats as special personal information. It is shown only to the people your employer's BizTrack system sends it to.
Some business customers use BizChat's sales features. For them, BizChat holds their customers' contact details: contact name, telephone number, email address, trading address and purchase history. These people have not signed up to BizChat themselves. The business customer is the responsible party for those records and decides what is kept.
Where a business customer's administrators manage access to its sales tools, we keep a permanent, add-only record of who changed whose access, and which products were included or excluded, with the administrator's name and the time.
BizChat can show your team's positions on a map. Those positions come from BizTrack's own systems and are only displayed by BizChat. The BizChat app does not access your device's location.
| Permission | Used for |
|---|---|
| Camera | Taking a photo to send in a chat or to use as your profile photo, only when you choose to |
| Photos and files (storage) | Choosing an image or document to send, only when you choose to. We do not scan your photo library or files |
| Notifications | Telling you about new messages and support replies |
| Fingerprint or face (optional) | Signing in without typing your password, only if you turn it on. Your phone checks your fingerprint or face itself; BizChat never receives it. Your email and password are kept encrypted on your phone and are deleted when you turn this off |
BizChat does not ask for or use your device's location, microphone, contacts or health data. It contains no advertising, and does not track you across other apps or websites.
We do not sell, rent or trade personal information, and we do not use it for advertising.
BizChat relies on the following service providers. Most of them process information outside South Africa:
| Provider | What it receives | Where |
|---|---|---|
| Supabase (database, sign-in and file storage) | Everything described in section 3 | United States (Ohio) |
| OneSignal (push notifications) | Your account identifier, your device's push identifier, and the text of each notification. For a chat message, that is a preview of the message | United States; delivered to your device through Apple or Google |
| Anthropic (AI support assistant) | The content of support conversations it answers. Most support requests are first answered by this assistant | United States |
| Mapbox (maps) | Your network address and the area of the map you view | United States |
| Google Firebase (web app hosting and performance monitoring) | Your network address when the web app loads, and the app's performance measurements (device, network and timing) | United States and Google's global network |
| PatternMatched Technologies (its Obsidian platform provides reverse-billed "data-free" access, only for business customers who use it) | All traffic between the app and our database, passed through so that the business pays the data cost instead of you | Passes through the European Union (Ireland); the data itself is stored in the United States (Ohio) |
Section 72 of POPIA allows a transfer like this where the recipient is subject to a law, binding corporate rules, or a binding agreement providing an adequate level of protection. We rely on the data processing terms that form part of our agreement with each provider as that binding agreement. Google, OneSignal and Anthropic may also process some information for their own regulatory, security and service purposes, under their own privacy terms.
Images and documents shared in BizChat are stored under long, random web addresses that cannot be guessed or listed. However, anyone who has the link to a file can open it without signing in, so a link copied outside BizChat gives access to that file. Please do not share file links outside your team.
We keep your account, messages and files for as long as your business customer uses BizChat. When a business customer closes its account, its data is deleted within 90 days. We keep support records for 24 months after the request is resolved, and the technical log of notices for 90 days. Both are deleted automatically.
We protect personal information with encryption in transit (TLS) and at rest, sign-in through a managed identity provider, access limited by role within each business, and an add-only record of administrators' access changes. No system is perfectly secure. If a security compromise affects your information, we tell the business customer responsible for it without undue delay, so that it can tell the Information Regulator and the people affected, as POPIA requires.
Under POPIA you may ask to be told what personal information is held about you and to see it; ask for it to be corrected or deleted; object to processing on reasonable grounds; and complain to the Information Regulator.
Because your business customer is responsible for its workspace, requests about your messages and account are usually best made to your employer or the business you deal with. You may also contact us, and we will pass the request on or help it reach the right party.
BizChat is a workplace tool and is not intended for anyone under 18. We do not knowingly collect children's personal information.
The web app uses your browser's local storage to keep you signed in. It does not use advertising or tracking cookies.
When we change this policy materially, we will update the effective date above and let business customers know.
BZ Tracking Solution (Pty) Ltd, registration number 2014/231948/07
18 Ingrid Jonker Street, Langenhovenpark, Bloemfontein, Free State, 9301, South Africa
Information Officer: Gustaff Pain
Email: support@biztrack.co.za
Phone: 021 832 0861
The company's PAIA manual, which describes the records we hold and how to request access to them, is at biztrack.church/paia-manual.html.
If you believe your privacy has been infringed, you may complain to the Information Regulator: inforegulator.org.za, complaints.IR@justice.gov.za.