Privacy Policy

Takat AI (Pty) Ltd ("TAKAT", "we", "us", or "our") is a company incorporated in the Republic of South Africa. We are committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA), the Electronic Communications and Transactions Act, 2002 (ECTA), and other applicable data protection legislation.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website at takat.ai and use our services.

Information you provide directly:

• Name, email address, and phone number — when you book a discovery call, use our chatbot, or submit a contact form
• Company name and industry — when you engage in conversations with our AI assistant
• Calendar preferences — when you schedule meetings through our booking system

Information collected automatically:

• IP address and approximate location (for rate limiting and security)
• Browser type, device information, and referring URLs (via standard web analytics)
• Usage data — pages visited, features used, and interaction patterns

We process your personal information for the following purposes:

• Service delivery — to schedule meetings, send booking confirmations, and respond to inquiries
• Communication — to follow up on discovery calls and provide information about our products and services
• AI chatbot interactions — to provide relevant responses about our solutions. Conversations are processed by Anthropic's Claude AI and are not stored beyond the active session
• Security and fraud prevention — to protect our systems through rate limiting and abuse detection
• Improvement — to improve our website, products, and user experience

Under POPIA, we process your personal information based on:

• Consent — when you voluntarily provide your details through our forms, chatbot, or booking system
• Contractual necessity — to fulfil obligations related to our services
• Legitimate interest — for security, analytics, and service improvement, balanced against your privacy rights

We use the following third-party services to operate our platform:

These providers may process data outside of South Africa. Where this occurs, we ensure appropriate safeguards are in place as required by POPIA Section 72.

• Chatbot conversations — not stored after the browser session ends
• Booking and contact details — retained for as long as necessary to fulfil the purpose for which they were collected, typically no longer than 24 months after last interaction
• Calendar events — managed through Google Calendar and subject to Google's retention policies
• Analytics data — retained in aggregate, anonymised form

As a data subject, you have the right to:

• Access — request confirmation of whether we hold your personal information and obtain a copy
• Correction — request correction or deletion of inaccurate, irrelevant, or outdated personal information
• Deletion — request destruction of your personal information when it is no longer needed
• Objection — object to the processing of your personal information on reasonable grounds
• Withdrawal of consent — withdraw previously given consent at any time
• Complaint — submit a complaint to the Information Regulator of South Africa

To exercise any of these rights, contact us at privacy@takat.ai. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal information, including:

• HTTPS encryption for all data in transit
• Rate limiting and input validation on all API endpoints
• Environment-variable-based secrets management (API keys are never exposed client-side)
• Access controls limited to authorised personnel

When you connect your Google account to Mica, we access data through Gmail and Google Calendar APIs. Mica's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we use Google user data only to provide and improve user-facing features inside Mica:

• Gmail (gmail.send, gmail.readonly) — sending emails on your behalf from Mica's composer, syncing inbound messages to your CRM timeline, surfacing follow-up reminders, and drafting contextual AI reply suggestions.
• Google Calendar (calendar.readonly) — reading upcoming events to generate pre-meeting briefings and link meetings to the correct CRM contacts. Mica never modifies your calendar.

We do not:

• Use Google user data to train generalised or third-party AI/ML models.
• Transfer Google user data to third parties except as needed to provide or improve the user-facing features above, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with appropriate notice to affected users.
• Use Google user data for advertising, including retargeting, personalised advertising, or interest-based advertising.
• Allow humans to read Google user data, except (a) with your affirmative agreement for specific messages, (b) where necessary for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) in aggregated, anonymised form for internal operations.

You can revoke Mica's access to your Google data at any time from your Google Account permissions page or by disconnecting Google from Mica's Settings → Connections page.

Our website uses minimal cookies and local storage for essential functionality only. We do not use third-party tracking cookies or advertising pixels. Analytics, if enabled, use privacy-respecting, cookieless methods.

Our services are not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the effective date at the top of this page. We encourage you to review this policy periodically.

For privacy-related enquiries or to exercise your POPIA rights: