Legal
Privacy Policy
This Privacy Policy explains how Echoprice collects, uses, stores, and protects information when you use our WhatsApp quotation bot, web portal, and related services (the “Service”).
1. Who we are
Echoprice is a software-as-a-service (SaaS) product that helps contractors generate professional quotation PDFs via WhatsApp. The Service is operated by ECHOPRICE (PTY) LTD, a private company incorporated in South Africa (Registration No. 2026/276761/07, registered with the CIPC on 7 April 2026).
Registered address: 101 Mophane Street, Pretoria, Gauteng, 0006, South Africa.
Contact: [email protected].
2. Information we collect
When you use the Service, we may collect and process the following information:
- WhatsApp identifiers and phone numbers — your WhatsApp phone number and, where applicable, your client’s phone number.
- Conversation content — messages you send to the bot, including job descriptions, line items, pricing, and notes needed to generate quotations.
- Account details — your name, business name, email address, and other profile details you provide in the portal or during onboarding.
- Usage data — basic technical data such as timestamps, number of quotations generated, and limited logs needed to operate and secure the Service.
We do not intentionally collect sensitive categories of personal information. Please do not send sensitive information (such as ID numbers or full card details) to the bot.
Important boundary: do not send banking details in WhatsApp chat. Echoprice does not publish contractor bank details on invoices; online payments are handled through Paystack checkout.
3. How we use your information
We use the information we collect strictly to operate and improve the Service, including to:
- Generate and deliver quotation PDFs based on the details you provide in WhatsApp conversations.
- Maintain your account state, such as recent conversations, quote history, and basic business profile.
- Provide customer support and respond to your queries.
- Monitor usage (for example, quotation counts) and enforce fair-use protections against abuse.
- Maintain security, prevent abuse, and troubleshoot technical issues.
We do not sell user data or client phone numbers to third parties. Data collected (including phone numbers and job details) is used only for functional operation of the Service — generating quotations, delivering PDFs, and maintaining your account state.
4. Legal bases for processing
We process your personal data on the basis of:
- Contractual necessity — to provide the Service you request, such as generating and sending quotes.
- Legitimate interests — to operate, secure, and improve Echoprice in a way that is reasonable and expected.
- Consent — where required by law, for specific optional features or communications.
6. WhatsApp Business Platform & Twilio
Echoprice operates as a business on the WhatsApp Business Platform, which is provided by Meta Platforms, Inc. and its affiliates (including WhatsApp LLC and WhatsApp Ireland Limited). We connect to that platform through Twilio Inc., our authorised Business Solution Provider (BSP). This means that every message, voice note, image, document, or PDF that flows between you (or your clients) and Echoprice on WhatsApp passes through Meta’s and Twilio’s systems.
As a result, Meta and Twilio will receive and process, in their own role and under their own privacy policies, things like:
- Phone numbers and WhatsApp profile information of you and the clients you message.
- The contents of messages, media, voice notes and PDFs sent through the conversation.
- Metadata about messages, including timestamps, delivery status, message IDs, and device or network information.
Their handling of that data is governed by their own terms and privacy notices, including the WhatsApp Business Data Processing Terms, the WhatsApp Privacy Policy, and Twilio’s Privacy Notice. We have no control over their independent processing.
You confirm that, when you use Echoprice to message a client, you have a lawful basis (for example, that client’s consent or your legitimate business relationship with them) to share their phone number and any related information with us, Meta, and Twilio for the purpose of delivering the WhatsApp conversation and the resulting quotation. You will respect the WhatsApp Business Messaging Policy, including the 24-hour customer service window and the prohibition on sending unsolicited or prohibited messages.
7. Payment processing
When online payment links are enabled and a client pays an invoice generated by Echoprice, the payment is processed by Paystack.
To initiate an online payment, Paystack receives information that includes:
- The invoice amount and currency.
- A payment reference used to match the incoming payment to the invoice.
- The redirect URL the client is returned to after payment.
- Technical identifiers collected directly by Paystack’s hosted checkout when the client completes the payment.
Payer consent: When a client clicks an Echoprice payment link, they leave the Echoprice environment and enter Paystack’s hosted checkout. By proceeding, the client consents to Paystack collecting and processing payment and identity information directly, in accordance with Paystack’s Merchant Privacy Policy. Echoprice does not receive or store the client’s banking credentials.
Identity verification: Paystack may be required to perform customer, merchant, sanctions, fraud, KYC, or AML checks before or after processing a payment. Information requested by Paystack is handled by Paystack directly and is governed by its own privacy notice and regulatory obligations.
What Echoprice does not send to Paystack: We do not pass client names, phone numbers, email addresses, or any WhatsApp conversation content to Paystack unless it is strictly necessary to process the transaction.
What we receive: We receive a confirmation from Paystack when a payment is completed (a “webhook”), which includes the payment reference and amount. We use this solely to mark the invoice as paid and to notify the contractor via WhatsApp. We store this confirmation record (payment reference, amount, timestamp, and payment status) for a minimum of five (5) years to meet applicable financial record-keeping requirements under South African law.
8. Data retention
We keep your data for as long as reasonably necessary to operate the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Quote records and conversation history may be retained while your account is active so that you can view past activity and download previous quotations.
You can request deletion of your account and associated data at any time (see “Your rights and choices” below).
9. Your rights and choices
Depending on your location and applicable law, you may have rights to:
- Access the personal data we hold about you.
- Request corrections to inaccurate or incomplete information.
- Request deletion of your account and associated data.
- Object to or restrict certain types of processing.
To exercise these rights, or to request account and data deletion, please contact us at [email protected]. We will verify your identity and respond within a reasonable time.
10. Data security
We use reasonable technical and organisational measures to protect your information, including encrypted connections and access controls. However, no online service is completely secure, and we cannot guarantee absolute security of your data.
11. International transfers
Because we use third-party providers such as Twilio, Google Gemini, and cloud hosting platforms, your information may be processed in countries outside of South Africa and your country of residence. Where required, we take steps to ensure that appropriate safeguards are in place for such transfers.
12. Third-party services
Our Service integrates with third-party platforms such as WhatsApp, Twilio, Google Gemini, and cloud infrastructure providers. Your use of those services is also subject to their respective terms and privacy policies. We are not responsible for how those third parties handle your data.
13. Children
Echoprice is designed for use by businesses and independent contractors. It is not intended for children under the age of 18, and we do not knowingly collect personal information from children.
14. Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If changes are material, we may provide additional notice (for example, via email or a notice on our website).
15. Contact us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
- Legal entity: ECHOPRICE (PTY) LTD
- Registration number: 2026/276761/07
- Registered address: 101 Mophane Street, Pretoria, Gauteng, 0006, South Africa
- Email: [email protected]