Who we are
Bayescope is a product of COGO Data (Pty) Ltd (“COGO Data”, “we”, “us”), registration number 2020/479103/07. Our Information Officer is Christiaan Rudolph Oosthuizen. For any privacy question or request, email info@cogodata.co.za with “Privacy request” in the subject line.
Our two roles
Under the Protection of Personal Information Act (POPIA), we act in two roles:
- Responsible party for information about our customers' account users, billing and visits to this website, and for the information we need to run and secure Bayescope.
- Operator for personal information that customers' agents process on their instructions, such as the business contact details of people at other organisations. The customer business is the responsible party for that information.
If your question concerns information a business holds about you through Bayescope, that business is responsible for answering it. We will help it respond.
What we collect
- Account information: name, work email address, Microsoft account and organisation identifiers, and workspace role.
- Business configuration: business profile, agent names, objectives, instructions, schedules and settings.
- Research records: information agents gather from public sources for a customer's tasks, with source links. This can include the names, roles and business contact details of people at other organisations.
- Agent mailbox data: for agent mailboxes a customer connects, the messages Bayescope sends and the replies it reads to detect responses and opt-outs.
- Connected LinkedIn and WhatsApp accounts (Bayescope Omnichannel): the account's name, profile address or phone number and connection status; the messages and connection requests agents send through it; the replies and connection acceptances it receives; and the LinkedIn profiles, companies and posts agents look up for the customer's tasks. Customers connect these accounts on LinkupAPI's own page, so we never receive their passwords.
- Social accounts and posts (social media manager, Bayescope Omnichannel): the Facebook Page, Instagram business account and LinkedIn profile or company page a customer connects, the access tokens Meta issues for them (stored encrypted), the posts and generated images and videos the customer's tasks prepare, and the published posts' addresses and engagement counts. Customers sign in on Facebook's own page, so we never receive their passwords. Prompts for generated media never contain personal information, and generated people are fictional.
- Contact history: who was contacted and when, outcomes, consent responses and unsubscribe requests.
- Billing information: subscription status, amounts, dates and payment references from Paystack. We never receive or store full card numbers.
- Technical information: security logs, IP addresses and request details needed to operate and protect Bayescope.
How we use it
- To provide Bayescope, including running agents on our customers' instructions.
- To manage subscriptions and payments, and to keep tax and accounting records.
- To secure the service and to prevent fraud and misuse.
- To support customers and to send service messages, such as setup and billing notices.
- To keep Bayescope reliable, using operational information such as run outcomes and errors.
We do not sell personal information, and we do not use workspace data to train AI models.
Why we may process it
We process personal information when it is necessary to perform our agreement with a customer, to comply with the law, or for legitimate interests such as security and fraud prevention, and with consent where consent is required (section 11 of POPIA). As an operator, we process information only on our customers' instructions.
Information outside South Africa
Some of these providers store or process information outside South Africa, including in the European Union and the United States. We transfer personal information only as section 72 of POPIA allows: for example, where the recipient is bound by law, binding corporate rules or an agreement that gives adequate protection, or where the transfer is necessary to perform our agreement with you.
How we protect it
- Connections to Bayescope use HTTPS.
- Passwords for internal services, connection details and agent credentials are stored encrypted.
- Each workspace has its own database and its own dedicated agent environment.
- Microsoft 365 permissions are scoped to the agent mailboxes a customer connects. Bayescope cannot read other mailboxes in the tenant.
- Staff access is limited to what their work requires, and important actions are logged.
If we believe personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and the people affected, as section 22 of POPIA requires.
How long we keep it
- Account information: for as long as the workspace exists, and afterwards for as long as the law requires.
- Billing records: for five years, as tax law requires.
- Opt-out and exclusion records: for as long as needed to make sure that people who asked not to be contacted are not contacted again.
- Workspace data: when a subscription ends, we return or delete it at the customer's request, unless the law requires us to keep it.
- Generated images and videos: files no post uses are deleted after 30 days, and those of finished posts 90 days after the post was published or closed.
- Security logs: for a limited period, for investigating incidents.
Your rights
You may ask us whether we hold personal information about you, ask for a copy, and ask us to correct or delete it. You may also object to processing, including direct marketing, and withdraw any consent you gave. We may need to verify your identity before acting on a request. Requests for records are also governed by the Promotion of Access to Information Act.
If you are not satisfied with our response, you may complain to the Information Regulator, at inforegulator.org.za or enquiries@inforegulator.org.za.
If you received a message sent with Bayescope
Businesses use Bayescope to contact other businesses, by email and, on Bayescope Omnichannel, through their own LinkedIn or WhatsApp accounts. The business that sent you the message is responsible for it. The unsubscribe link in an email stops all further messages from that business's agents. On LinkedIn or WhatsApp, reply “no” or “stop”: that also stops all further messages from that business, on every channel. You can also contact that business directly, or contact us and we will pass your request on.
Children
Bayescope is a business service and is not intended for children. Agents must not be used to collect information about children.
Changes to this policy
When we update this policy, we change the date at the top of this page. We tell customers about material changes by email or in the portal.