Privacy Policy
Effective Date: 2 January 2026
Last Updated: 2 January 2026
1. Introduction
1.1 About Bill
Bill is an email and WhatsApp billing application developed and operated by asdf consulting (Pty) Ltd (registration number: 2023/566704/07) ("Bill", "we", "us", or "our"). We are a South African private company with our principal place of business at 2 Blaauwklip Office Park, Webersvallei Road, Stellenbosch, Western Cape, South Africa.
Bill provides automated billing and time tracking services ("Services") to South African law firms. Our application automatically tracks email correspondence and WhatsApp messages, detects which legal matters the communications relate to, and creates billable time entries for attorneys.
1.2 Scope of This Policy
This privacy policy explains how we collect, use, store, process, and protect your personal information in accordance with:
- The Protection of Personal Information Act 4 of 2013 ("POPIA")
- The Electronic Communications and Transactions Act 25 of 2002 ("ECT Act")
- WhatsApp Business API requirements
- All other applicable South African data protection legislation
1.3 Who This Policy Applies To
This privacy policy applies to:
- Law firms who subscribe to and use our Services
- Attorneys employed by law firms using our Services
- Clients of law firms whose information is processed through our Services
- Any person whose personal information we collect or process in connection with our Services
1.4 Definition of Personal Information
In this privacy policy, "Personal Information" means any information by which you can be identified as an individual or juristic person, including but not limited to:
- Names, email addresses, telephone numbers, postal addresses
- Communication content and metadata
- Client matter information
- Time entry and billing data
- Financial details
- Any other information defined as personal information under POPIA
POPIA uniquely protects both natural persons (individuals) and juristic persons (companies, trusts, partnerships). This privacy policy covers personal information for both.
Examples of juristic person information we process:
- Law firm names, registration numbers, and contact details
- Client company information (for corporate clients)
- Business email addresses and communication metadata
- Corporate matter information and billing data
1.5 Our Commitment to Privacy
We recognise the importance of protecting your privacy and the confidential nature of legal communications. We are committed to processing your personal information lawfully, transparently, and securely in accordance with POPIA's eight conditions for lawful processing.
📄 Full Privacy Policy: This page displays key highlights. For the complete policy, download the PDF version.
Key Highlights
Your Rights
- ✓ Access your personal information (free)
- ✓ Correct inaccurate information
- ✓ Request deletion (subject to legal retention)
- ✓ Object to processing
- ✓ Data portability (CSV/JSON export)
- ✓ Lodge complaints with Information Regulator
Data Security
- ✓ TLS encryption in transit
- ✓ Encryption at rest
- ✓ OAuth 2.0 (no password storage)
- ✓ Multi-tenancy isolation
- ✓ ISO 27001 certified hosting
- ✓ Regular security audits
AI Processing
- ✓ OpenAI GPT-4 for matter detection
- ✓ Human oversight (attorneys review all)
- ✓ Right to object to AI processing
- ✓ Compliant with WhatsApp 2026 policy
- ✓ Ancillary use (not general chatbot)
Data Retention
- ✓ 7 years for billing records
- ✓ Legal basis: Companies Act, LPC rules
- ✓ Secure deletion after retention period
- ✓ Audit logs maintained
- ✓ Legal holds when required
Contact Information
Information Officer
Name: Ricky Klopper
Email: ricky@asdf.africa
Telephone: +27 69 0411 717
Address: 2 Blaauwklip Office Park, Webersvallei Road, Stellenbosch, Western Cape, South Africa
Information Regulator South Africa
POPIA Complaints: POPIAComplaints@inforegulator.org.za
Toll-Free: 0800 017 160
Website: inforegulator.org.za
Full Policy Sections
The complete privacy policy includes detailed information on:
- Introduction
- Responsible Party and Information Officer
- Personal Information We Collect
- How We Use Your Personal Information
- Artificial Intelligence and Automated Processing
- How We Share Your Personal Information
- Cross-Border Data Transfers
- Data Security and Protection
- Data Retention and Deletion
- Your Rights Under POPIA
- WhatsApp-Specific Privacy Information
- Cookies and Website Tracking
- Special Personal Information
- Children's Personal Information
- Changes to This Privacy Policy
- International Users and GDPR
- Legal Professional Privilege
- Business Transfers
- Contact Us
- Complaints and Dispute Resolution
- Acknowledgements and Consent
- Governing Law
- Effective Date
asdf consulting (Pty) Ltd.
Registration Number: 2023/566704/07
2 Blaauwklip Office Park, Webersvallei Road, Stellenbosch, Western Cape, South Africa