Privacy Policy

1. Introduction

This Privacy Policy explains how RD Investment Holdings (Pty) Ltd, trading as NexAgent AI ("we", "us", "our"), collects, uses, stores, and protects personal information in the course of providing our services. We are committed to complying with the Protection of Personal Information Act 4 of 2013 ("POPIA") and all applicable South African data protection legislation.

This policy covers NexAgent AI's current product line:

Product	Description	Pricing
NexAgent OS (Full System)	Complete automated business system — all 8 modules connected (WhatsApp Intake, NexQuote, NexTracker, Stock, Payroll, Invoice, Dashboard, Lead CRM)	R1,999/month — Founder's Discount, down from R2,499 (20% off), no setup fee

2. What Personal Information We Collect

The personal information we collect depends on which NexAgent AI product or service is in use. The following table sets out the data collected per product line:

Product

Data Collected

NexAgent OS (Full System)

Inbound WhatsApp messages; sender phone numbers; conversation history; business data supplied by the client (listings, inventory, service descriptions, pricing); job card records (client name, phone, email, job description, technician, status); quote records (client name, phone, email, quoted items, totals); staff details; lead and enquiry data from the CRM module; stock and inventory data; staff timesheet and payroll data; invoice and payment records; operational dashboard data

We also collect contact details of client businesses (name, trading name, email address, physical address) for the purposes of administering the service agreement.

3. Purpose of Processing

We process personal information solely for the following purposes:

• To operate and deliver whichever NexAgent AI product(s) the client has subscribed to
• To respond automatically to customer enquiries on behalf of our clients via WhatsApp
• To generate, store, and surface job cards, quotes, leads, invoices, stock records, payroll records, and operational data for our clients (NexAgent OS modules)
• To deliver WhatsApp notifications to clients and their customers (job completion alerts, quote confirmations, lead notifications)
• To maintain service performance, diagnose issues, and improve the system

4. Lawful Basis for Processing

We process personal information on the following lawful bases under POPIA:

• Legitimate interest: delivering contracted services to our business clients
• Contract performance: processing necessary to fulfil our service agreement with clients
• Consent: where end users interact with a NexAgent AI-powered WhatsApp number or application, they do so voluntarily

Note: Our clients (businesses that use the Service) are the "responsible party" in respect of their end-customers' data. NexAgent AI acts solely as an "operator" under POPIA and processes data only on behalf of and under the instruction of each client.

5. Third-Party Processors

In delivering our service, we share data with the following third-party processors. All processors are bound by appropriate data processing terms.

Processor	Purpose	Location
Make.com (Celonis SE)	Automation and workflow orchestration	EU / USA
Anthropic PBC	AI language model (Claude) for generating responses	USA
Google LLC	Data storage (Google Sheets), email notifications (Gmail)	USA
Meta Platforms Inc.	WhatsApp Business API — message delivery infrastructure	USA

Where data is transferred to processors outside South Africa, we rely on appropriate safeguards including the processors' own standard contractual clauses, privacy frameworks, and certifications.

6. Data Retention

Retention periods vary by data type:

Data Type	Retention Period
WhatsApp conversation history (message content)	Maximum 6 months from date of interaction, then permanently deleted
Job card, quote, lead, invoice, stock, and payroll records (NexAgent OS modules)	Duration of the service agreement + 30 days after termination, then deleted
Client business contact details	Duration of the service agreement + 30 days after termination, then deleted

7. Your Rights Under POPIA

As a data subject, you have the following rights under POPIA:

• Access: request confirmation of whether we hold your personal information and a copy thereof
• Correction: request correction of inaccurate or incomplete personal information
• Deletion: request deletion of your personal information where we no longer have lawful grounds to process it
• Objection: object to the processing of your personal information
• Complaints: lodge a complaint with the Information Regulator (see below)

To exercise any of these rights, contact us at: rubendiedericks24@gmail.com

8. Security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, loss, alteration, or disclosure. Access to client data is restricted to authorised personnel only. All data in transit is encrypted via HTTPS/TLS.

9. Cookies

This website does not use tracking cookies or analytics cookies. No personal information is collected through the rdinvestmentholdings.co.za website.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent update. We will notify existing clients of material changes via email.

11. Contact & Complaints

For any privacy-related queries, contact our Information Officer:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa: