Privacy Policy

1. Who is responsible

Funnlr Agency operates the Funnlr website, WhatsApp service, client portal, hosted funnels, bots, booking tools, and support workflows described in this policy.

Privacy requests can be sent to hello@funnlr.co.za.

2. Information we collect

• Contact and account details such as your name, business name, email address, and WhatsApp number.
• The messages, answers, service details, brand preferences, images, and other content you choose to send us.
• Subscription records, payment references, payment status, package, and billing events. Payment providers handle the secure payment details entered on their checkout pages; Funnlr does not need your full card or bank credentials.
• Service and security records such as login activity, delivery status, audit events, errors, device or browser information, and IP address where available.
• Customer and booking information processed through a website, bot, or booking flow that we host for a client.

3. Why we use it

• To answer enquiries and recommend a suitable service.
• To build, deliver, revise, host, and support websites, WhatsApp bots, booking flows, and client accounts.
• To create secure payment requests, reconcile provider confirmations, manage subscriptions, and prevent duplicate or fraudulent payments.
• To send service messages, preview links, account invitations, billing notices, and support updates.
• To secure, diagnose, audit, and improve the Funnlr platform.
• To meet legal, accounting, and dispute-handling obligations.

Where consent is required, you may withdraw it for future processing. Withdrawal does not undo lawful processing that already took place.

4. Service providers and public content

We use service providers for hosting, databases, messaging, email, automation, artificial intelligence, analytics, and payment processing. They receive only the information needed for their role and may process it in other countries under their own security and privacy controls.

We do not sell or rent personal information. When you approve a website for public launch, the business content and contact details placed on that website become publicly accessible.

We name one of those providers here because it measures what you do on this site. Meta Platforms, the company behind Facebook and Instagram, receives activity from a Meta pixel that runs on our home, pricing, shop, product, and payment confirmation pages. It reports which of those pages you open, which products you view, what you add to a cart, when you start a checkout, and when a purchase completes, along with the device, browser, and IP address details your browser sends with any web request. We report a purchase only after our payment provider confirms the money arrived. Your browser sends Meta no name, email address, or phone number. We use this to see which pages lead to a sale and to measure advertising.

If we switch on Meta's server-side reporting, we will also send Meta a scrambled version of an email address or phone number so that it can match a sale to an account. Meta cannot read the original details back out of a scrambled value.

You can stop this. Most ad blockers and browser privacy settings block the pixel before it loads, and the off-site activity controls in your Meta account settings disconnect this activity from your profile.

5. Retention and security

We keep information for as long as it is reasonably needed to provide the service, maintain required records, resolve disputes, and protect the platform. Unfinished WhatsApp website interviews expire after 24 hours. After a build is queued, the temporary interview store deletes the raw answers; the business details needed to build and support the site remain in the protected platform record.

An unpaid free preview is paused 7 days after it is built: the public page is replaced with a paused notice while the build stays stored. Its public hosting project and private build repository are scheduled for deletion 30 days after the preview is built if it has not been activated. We retain a minimal site tombstone and audit record so the deletion and payment safeguards can be proved. Contact details, submitted onboarding information, and uploaded assets are handled separately as unconverted-lead records and may be kept for up to 12 months before deletion or anonymisation, unless a legal, security, opt-out, or dispute record must be retained.

We use access controls, authentication, private secrets, audit records, and encrypted connections where supported. No online service can promise absolute security.

6. Your choices and rights

You may ask whether we hold personal information about you and request access, correction, deletion where applicable, or an objection to certain processing. We may need to verify your identity and may retain information that the law or an active dispute requires us to keep.

You may stop promotional messages at any time. Operational messages needed to deliver an active service may continue.

You may also raise a complaint with South Africa’s Information Regulator.

7. Client responsibilities

A Funnlr client who collects information from its own customers through a hosted site, bot, or booking flow remains responsible for using that information lawfully and giving its customers any notice or consent choice their business requires.

8. Changes and contact

We may update this policy when the service or applicable requirements change. The effective date above shows the current version.

Email hello@funnlr.co.za for a privacy request or question.