LTV Labs
POPIA-compliantEffective 27 May 2026

Privacy Policy

LTV Labs SA (Pty) Ltd · Registration 2026/383498/07

1. Introduction

LTV Labs SA (Pty) Ltd ("LTV Labs", "we", "us", or "our") is committed to protecting the personal information of all individuals who use our platform. This Privacy Policy explains how we collect, process, store, and share personal information in compliance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and the General Data Protection Regulation ("GDPR") where applicable.

By accessing or using LTV Labs, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of our services immediately.

2. Who we are

Responsible Party / Controller: LTV Labs SA (Pty) Ltd
Registration: 2026/383498/07
Address: 394 Walter Sisulu Lane, Miederpark, Potchefstroom, North West, 2531, South Africa
Information Officer: Willem Reynders — info@ltvlabs.co.za

3. What personal information we collect

3.1 Account information (Customer users)

When you or your organisation registers for LTV Labs, we collect:

  • Full name and email address of users and administrators
  • Hashed passwords (we never store plaintext passwords)
  • Business name, billing email, billing phone number
  • WhatsApp Business Account (WABA) identifiers and phone number IDs provided by Meta
  • VAT number and payment identifiers (e.g. PayFast token)

3.2 End-contact information

Important — POPIA roles. Where your business uploads contact records into LTV Labs, your business is the Responsible Party for that data under POPIA. LTV Labs processes it only as your Operator, on your documented instructions. You bear sole legal responsibility for the lawful basis of processing, opt-in consent, privacy notices to your end-contacts, and responses to data subject requests. See our Operator Agreement for the full split of responsibilities.

LTV Labs is a B2B SaaS platform. Your business uploads or receives contact records representing your end-customers, prospects, or other parties to whom you have a lawful basis to send WhatsApp messages. For each contact we store:

  • Name and mobile phone number (required)
  • Email address and contact type (optional)
  • Opt-out status and opt-out timestamp
  • Tags and custom fields defined by your business
  • Message history for conversations initiated through our platform

3.3 Usage and technical data

  • IP addresses (used for login rate-limiting; not linked to user profiles long-term)
  • Webhook event payloads received from Meta's WhatsApp Business API
  • Audit logs of administrative actions performed by super-admins
  • Error logs and performance metrics (anonymised where possible)

4. How we use your information

  • Service delivery: To operate the LTV Labs platform, route WhatsApp messages, and run automated flows on your behalf
  • Billing: To process subscription payments via PayFast and issue invoices
  • Security: To detect and prevent fraudulent or abusive activity (e.g. login rate-limiting by IP)
  • Support: To respond to support requests and diagnose technical problems
  • Legal compliance:To satisfy our obligations under POPIA, GDPR, and Meta's Business Policy
  • Product improvement: Aggregated, anonymised usage analytics to improve platform features

We do not sell your personal information to third parties.

Under POPIA, we process personal information on the following grounds:

  • Contract performance: To deliver the services you subscribed to
  • Legitimate interest: Security monitoring, fraud prevention, and service improvement
  • Legal obligation: Where South African law requires us to retain records
  • Consent: For optional marketing communications (you may withdraw at any time)

6. Who we share your data with

We share personal information only with:

  • Meta Platforms:Your WABA credentials and outbound messages are transmitted to Meta's Graph API to send WhatsApp messages. Meta's own privacy policy governs their processing.
  • PayFast (PTY) Ltd: Payment processing for subscriptions. We share only the minimum necessary billing details.
  • Infrastructure providers: Our servers run on VPS providers in South Africa. Data is stored within South African borders where possible.
  • Law enforcement: Where required by a valid court order or statutory obligation.

7. Data retention

  • Account data is retained for the duration of your subscription plus 12 months after cancellation
  • Message history and conversation records are retained for 3 years for audit purposes
  • Failed login records are automatically deleted after 24 hours
  • Billing records are retained for 5 years as required by the South African Revenue Service
  • On written request, we will erase personal data not subject to a legal retention obligation within 30 days

8. Security

We implement industry-standard security measures including TLS in transit, AES-256-GCM encryption at rest for sensitive tokens (e.g. WhatsApp access tokens), bcrypt password hashing, and per-tenant row-level security in the database. Access to production data is restricted to authorised personnel only. Despite these measures, no system is 100% secure — please notify us immediately at info@ltvlabs.co.za if you suspect a breach.

9. Your rights as a data subject

Under POPIA you have the right to:

  • Request confirmation of whether we hold your personal information
  • Request access to a copy of your personal information
  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal information (subject to legal retention obligations)
  • Object to the processing of your personal information
  • Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, submit a written request to info@ltvlabs.co.za. We will respond within 30 days. See our POPIA Rights page for the full process.

10. Cookies

LTV Labs uses session cookies solely for authentication purposes. We do not use tracking cookies or advertising pixels. Your session cookie is HttpOnly, Secure, and scoped to our domain.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to the billing contact on your account. Continued use of LTV Labs after the effective date constitutes acceptance of the revised policy.

12. Contact

For privacy-related queries: info@ltvlabs.co.za
For general legal matters: info@ltvlabs.co.za

LTV Labs SA (Pty) Ltd
Registration: 2026/383498/07
394 Walter Sisulu Lane, Miederpark, Potchefstroom, North West, 2531, South Africa
Information Officer: Willem Reynders — info@ltvlabs.co.za

Jurisdiction: North West High Court, Mahikeng, South Africa | Last updated: 27 May 2026