Privacy Policy

Effective 22 July 2026

This policy explains how NexaFlow, a product and business division of Wilsons Technologies CC (“NexaFlow”, “we”, “us”), processes personal information when people use NexaFlow services, websites and business tools. Wilsons Technologies CC applies the Protection of Personal Information Act 4 of 2013 (“POPIA”) as the responsible party for this processing.

1. Information we process

Depending on how the service is used, we may process:

• identity and contact information, such as names, telephone numbers and email addresses;
• business, customer-account and transaction details, including quotations, invoices, payments and purchase records;
• vehicle, order, collection and service information supplied during normal operations;
• staff and operator activity required for access control, audit history and security;
• technical information such as browser type, device information, timestamps, IP address and diagnostic records; and
• communications and support requests sent to us.

2. Why we use information

We process information to provide and secure the service; complete requested transactions; maintain accounts and operational records; communicate about orders, accounts and support; detect misuse; comply with legal and accounting obligations; and improve NexaFlow. We process information only where there is a lawful basis, including performance of a contract, consent, compliance with law, or a legitimate business interest that does not override a person’s rights.

3. Sharing

We do not sell personal information. We may share information with authorised staff, service providers that help operate NexaFlow, professional advisers, payment or communications providers selected by the relevant business, and public authorities where lawfully required. Service providers are expected to protect information and use it only for the agreed purpose.

3A. WhatsApp and service communications

Where a customer or authorised company representative provides a WhatsApp number, NexaFlow may use it for requested or operational messages such as transaction approval, payment reminders, service progress, invoices, statements and secure collection codes. Promotional electronic communications will require the consent or other lawful basis required by POPIA. WhatsApp messages are also processed by Meta and its service providers under their applicable terms and privacy practices.

3B. AI conversations and usage measurement

When a person uses NexaFlow AI, we may process prompts, voice-derived text, responses, model and token measurements, device trial identifiers, safety signals and billing records. This information is used to provide answers, enforce fair use, calculate service cost, protect accounts and resolve disputes. AI requests may be processed by contracted model or infrastructure providers, including providers outside South Africa, subject to appropriate contractual and legal safeguards. Do not submit unnecessary identity numbers, health information, banking credentials, confidential employer information or another person’s private information.

4. Storage and international processing

Information may be stored on devices used by the business and on hosting or infrastructure services used to operate NexaFlow. Where information is processed outside South Africa, we take reasonable steps to ensure an appropriate level of protection consistent with applicable law.

5. Retention

We keep personal information only as long as reasonably necessary for the purposes described here, including operational, contractual, tax, accounting, dispute and legal requirements. Retention periods vary by record type. Information is deleted or de-identified when it is no longer required, subject to lawful exceptions and backups.

6. Security

We use reasonable organisational and technical safeguards designed to protect information against loss, unauthorised access, alteration or disclosure. No internet-connected system can be guaranteed completely secure. Users must protect their access credentials and devices and notify us promptly of suspected misuse.

7. Your POPIA rights

Subject to POPIA and other applicable law, a person may ask whether we hold their personal information, request access or correction, object to certain processing, withdraw consent where processing relies on consent, or request deletion where retention is not legally required. We may need to verify identity and may retain information where the law permits or requires it. See our Data Deletion page to submit a request. A person may also lodge a complaint with South Africa’s Information Regulator through its official website at inforegulator.org.za.

8. Children

NexaFlow is a business operations service and is not directed to children. We do not knowingly invite children to create accounts or submit personal information without appropriate authority.

9. Third-party services

NexaFlow may link to or work with third-party services. Their privacy practices are governed by their own policies, and we encourage users to review them.

10. Changes

We may update this policy to reflect changes to NexaFlow or legal requirements. The effective date above will be updated when material changes are published.

11. Contact

Responsible organisation: Wilsons Technologies CC, registration number 2007/105776/23. Information Officer: Wilson Matshwenyego Nkomo, Information Regulator reference 2026-063352. For privacy questions or requests, email nwwwilson@gmail.com or telephone +27 76 109 7030. Postal or in-person correspondence may be directed to 3950 Phase 1 Ext 1, Riverside, Meriting, Rustenburg, 0300, South Africa.

Plain-language summary: NexaFlow uses the information needed to operate and protect the service, does not sell personal information, and provides a process for privacy and deletion requests.