Legal
Last updated: October 2026
Eiro Systems is a trading name of K2026174513 (Pty) Ltd, registered in South Africa. We respect your privacy and handle personal information in accordance with the Protection of Personal Information Act (POPIA), wherever our customers and their visitors are. This policy explains how we collect, use, and protect your data.
Account information: When you create an account, we collect your email address and, if you give it, your name. When you add a business, we store its name, website domains and widget settings.
Contact information: When you submit our contact form or email us, we collect your name, email address, business name, and message content.
Payment information: Payments are processed by Whop, our payment provider. We never see or store card details. We receive a record of each payment (amount, plan, date, and the email used at checkout).
Knowledge base content: The website pages and documents you give us to build your assistant's knowledge base. This content belongs to you; we use it only to run your assistant.
This section covers how the AI Support Chat product handles your website visitors' chat messages.
How messages are processed: When a visitor types into the chat widget on your website, their message is sent to our server, which forwards it to Anthropic's Claude API to generate a response. The response is returned to the visitor. Anthropic processes messages under its own data handling policies (see anthropic.com/legal/privacy).
Voice input: If a visitor uses the microphone button, their own browser turns their speech into text (for example Google in Chrome, or Apple in Safari, under that provider's terms), and the words appear in the message box before they send them. We never receive or store audio, only the text that is sent.
"Try it on your website" preview: When you type a web address on our Try it page, we read that public page once and send its text to our AI provider (Anthropic) to build a temporary assistant. The result is kept only in your browser for a few hours, and the questions you ask in the preview are not stored. We keep a short-lived counter, tied to a scrambled form of your IP address, to limit how many previews one visitor can make each day.
How you found us: When you open one of our links from social media, we record that the link was opened, which post it was for, your approximate country and city (from your IP address, which we do not store) and your type of device and browser. Our pages keep a random visitor ID in your browser to count visits by channel; we record only the page address, never what you type. When you create an account we save which link or site brought you and your answer to "How did you hear about us?". If you decline cookies, we do not record your page visits, and nothing is kept in your browser after you close the tab.
Chat logs: Chat messages are retained for 30 days for support and quality purposes, then permanently deleted.
Escalations: When the assistant hands a conversation to you, the recent messages and any email address the visitor chooses to leave are saved as an escalation in your dashboard, so you can follow up. Escalations are kept while your account is open, and deleted on request.
Where data is processed: Our service runs on cloud providers (listed in section 5), so data may be processed in countries other than your own. We use providers that protect data with industry-standard safeguards.
Customer ownership: The knowledge base built for your assistant belongs to you. On cancellation, we delete it from our systems within 7 days on request.
We share data only with the providers that run the service, each bound by data protection obligations: Anthropic (AI responses); Supabase (database and accounts); Vercel (hosting); Whop (payments); Resend (email delivery); and Meta's WhatsApp Business service, only if you switch on WhatsApp alerts. We also disclose data when required by law.
We use SSL/TLS encryption in transit, secure cloud storage, access controls, and server-side storage of API keys. Card details never touch our servers.
You have the right to access, correct, or delete your personal data, to object to processing, and to withdraw consent. Under POPIA you can also lodge a complaint with the Information Regulator of South Africa, and you may have further rights under the data protection laws of your own country. Email info@eirosystems.com to exercise any of these rights.
If you are a visitor to one of our customers' websites, that business decides how its assistant is used; you can contact the business directly, or us, and we will help.
Chat logs are retained for 30 days. Contact form submissions are retained for 6 months. Account and payment records are retained for 5 years to meet tax and financial record-keeping requirements. You can request deletion of your account or contact record at any time.
We may update this policy with reasonable notice. Changes will be posted on this page with an updated date.
In accordance with section 55 of the Protection of Personal Information Act, the Information Officer for K2026174513 (Pty) Ltd t/a Eiro Systems is the sole director of the company. All privacy requests, access requests, and complaints should be directed to the Information Officer via:
The Information Officer will respond to any request within 30 days as required by section 24 of the Act. You also have the right to lodge a complaint directly with the Information Regulator of South Africa at inforegulator.org.za.
For general privacy-related questions: info@eirosystems.com