Legal
Privacy Policy
This Privacy Policy explains how Echoprice collects, uses, stores, and protects information when you use our WhatsApp quotation bot, web portal, and related services (the “Service”).
1. Who we are
Echoprice is a software-as-a-service (SaaS) product that helps contractors generate professional quotation PDFs via WhatsApp. The Service is operated by ECHOPRICE (PTY) LTD, a private company incorporated in South Africa (Registration No. 2026/276761/07, registered with the CIPC on 7 April 2026).
Registered address: 101 Mophane Street, Pretoria, Gauteng, 0006, South Africa.
Contact: [email protected].
2. Information we collect
When you use the Service, we may collect and process the following information:
- WhatsApp identifiers and phone numbers — your WhatsApp phone number and, where applicable, your client’s phone number.
- Conversation content — messages you send to the bot, including job descriptions, line items, pricing, and notes needed to generate quotations.
- Account details — your name, business name, email address, and other profile details you provide in the portal or during onboarding.
- Usage data — basic technical data such as timestamps, number of quotations generated, and limited logs needed to operate and secure the Service.
We do not intentionally collect sensitive categories of personal information. Please do not send sensitive information (such as ID numbers or full card details) to the bot.
Important boundary: do not send banking details in WhatsApp chat. If required for payout information, enter banking details only through your authenticated portal settings.
3. How we use your information
We use the information we collect strictly to operate and improve the Service, including to:
- Generate and deliver quotation PDFs based on the details you provide in WhatsApp conversations.
- Maintain your account state, such as recent conversations, quote history, and basic business profile.
- Provide customer support and respond to your queries.
- Monitor usage (for example, quotation counts) and enforce fair-use protections against abuse.
- Maintain security, prevent abuse, and troubleshoot technical issues.
We do not sell user data or client phone numbers to third parties. Data collected (including phone numbers and job details) is used only for functional operation of the Service — generating quotations, delivering PDFs, and maintaining your account state.
4. Legal bases for processing
We process your personal data on the basis of:
- Contractual necessity — to provide the Service you request, such as generating and sending quotes.
- Legitimate interests — to operate, secure, and improve Echoprice in a way that is reasonable and expected.
- Consent — where required by law, for specific optional features or communications.
6. WhatsApp Business Platform & Twilio
Echoprice operates as a business on the WhatsApp Business Platform, which is provided by Meta Platforms, Inc. and its affiliates (including WhatsApp LLC and WhatsApp Ireland Limited). We connect to that platform through Twilio Inc., our authorised Business Solution Provider (BSP). This means that every message, voice note, image, document, or PDF that flows between you (or your clients) and Echoprice on WhatsApp passes through Meta’s and Twilio’s systems.
As a result, Meta and Twilio will receive and process, in their own role and under their own privacy policies, things like:
- Phone numbers and WhatsApp profile information of you and the clients you message.
- The contents of messages, media, voice notes and PDFs sent through the conversation.
- Metadata about messages, including timestamps, delivery status, message IDs, and device or network information.
Their handling of that data is governed by their own terms and privacy notices, including the WhatsApp Business Data Processing Terms, the WhatsApp Privacy Policy, and Twilio’s Privacy Notice. We have no control over their independent processing.
You confirm that, when you use Echoprice to message a client, you have a lawful basis (for example, that client’s consent or your legitimate business relationship with them) to share their phone number and any related information with us, Meta, and Twilio for the purpose of delivering the WhatsApp conversation and the resulting quotation. You will respect the WhatsApp Business Messaging Policy, including the 24-hour customer service window and the prohibition on sending unsolicited or prohibited messages.
7. Payment processing
When online payment links are enabled and a client pays an invoice generated by Echoprice, the payment is processed by Stitch Technology Services (Pty) Ltd (“Stitch”), a licensed and regulated Payment Service Provider in the Republic of South Africa, or another approved regulated provider.
To initiate an online payment, the payment provider receives information that includes:
- The invoice amount and currency.
- A payment reference (the Echoprice invoice number) used to match the incoming payment to the invoice.
- The redirect URL the client is returned to after payment.
- Technical identifiers (IP address, device/browser data) collected directly by Stitch’s own hosted payment page when the client completes the payment.
Payer consent: When a client clicks an Echoprice payment link, they leave the Echoprice environment and enter Stitch’s own hosted payment interface. By proceeding, the client consents to Stitch collecting and processing their banking and identity information directly, in accordance with Stitch’s Privacy Policy. Echoprice does not receive or store the client’s banking credentials.
What Echoprice does not send to the provider: We do not pass client names, phone numbers, email addresses, or any WhatsApp conversation content to the payment provider unless it is strictly necessary to process the transaction.
FICA / identity verification: As a licensed payment service provider, Stitch may be required under the Financial Intelligence Centre Act (FICA) and anti-money-laundering (AML) regulations to collect additional identity or verification information from payers or payees. This data is collected and processed by Stitch directly and is governed by Stitch’s own privacy notice and regulatory obligations. Echoprice has no visibility into or control over that data.
Capitec Pay: When a client uses a Capitec Pay deep link, Capitec Bank will independently receive information necessary to complete the payment. This is governed by Capitec Bank’s own privacy notice and terms.
What we receive: We receive a confirmation from the payment provider when a payment is completed (a “webhook”), which includes the payment reference and amount. We use this solely to mark the invoice as paid and to notify the contractor via WhatsApp. We store this confirmation record (payment reference, amount, timestamp, and payment status) for a minimum of five (5) years to meet applicable financial record-keeping requirements under South African law.
8. Data retention
We keep your data for as long as reasonably necessary to operate the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Quote records and conversation history may be retained while your account is active so that you can view past activity and download previous quotations.
You can request deletion of your account and associated data at any time (see “Your rights and choices” below).
9. Your rights and choices
Depending on your location and applicable law, you may have rights to:
- Access the personal data we hold about you.
- Request corrections to inaccurate or incomplete information.
- Request deletion of your account and associated data.
- Object to or restrict certain types of processing.
To exercise these rights, or to request account and data deletion, please contact us at [email protected]. We will verify your identity and respond within a reasonable time.
10. Data security
We use reasonable technical and organisational measures to protect your information, including encrypted connections and access controls. However, no online service is completely secure, and we cannot guarantee absolute security of your data.
11. International transfers
Because we use third-party providers such as Twilio, Google Gemini, and cloud hosting platforms, your information may be processed in countries outside of South Africa and your country of residence. Where required, we take steps to ensure that appropriate safeguards are in place for such transfers.
12. Third-party services
Our Service integrates with third-party platforms such as WhatsApp, Twilio, Google Gemini, and cloud infrastructure providers. Your use of those services is also subject to their respective terms and privacy policies. We are not responsible for how those third parties handle your data.
13. Children
Echoprice is designed for use by businesses and independent contractors. It is not intended for children under the age of 18, and we do not knowingly collect personal information from children.
14. Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If changes are material, we may provide additional notice (for example, via email or a notice on our website).
15. Contact us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
- Legal entity: ECHOPRICE (PTY) LTD
- Registration number: 2026/276761/07
- Registered address: 101 Mophane Street, Pretoria, Gauteng, 0006, South Africa
- Email: [email protected]