Privacy Policy
Last updated: September 14, 2026
1. Who We Are
SHWI AM (PTY) LTD ("Shwi", "we", "us") operates Shwi Recharge, a prepaid digital recharge platform. We are responsible for personal information processed through our website, dashboard, API, and WhatsApp services. Contact us at hello@shwi.co.za for privacy enquiries.
2. Information We Collect
We may collect:
- Account data: name, email, phone number, password hash, role, login history.
- Organisation data: organisation name, registration reference, verification status.
- Beneficiary and contact data: MSISDNs, aliases, groups, and CSV uploads you provide.
- Transaction data: recharge history, wallet movements, invoices, API request logs.
- Payment data: EFT references and allocation records (we do not store full bank account numbers you pay from).
- WhatsApp data: phone numbers, session messages, and interaction data when you use WhatsApp features.
- Technical data: IP address, browser type, device information, and cookies necessary for security and session management.
- Support and form data: messages you send via contact or account deletion forms.
3. How We Use Information
We use personal information to:
- Provide, operate, and improve the Services.
- Process wallet deposits and recharge transactions.
- Verify organisations and enforce deposit limits.
- Send service notifications, security alerts, and support responses.
- Comply with legal, tax, and regulatory obligations.
- Detect fraud, abuse, and security incidents.
4. Lawful Basis (POPIA)
We process personal information in accordance with the Protection of Personal Information Act (POPIA). Depending on context, we rely on consent, contractual necessity, legitimate interests (such as fraud prevention), and legal obligation. Where you upload beneficiary or contact data, you are responsible for having an appropriate lawful basis and for informing data subjects where required.
5. Sharing and Processors
We may share information with:
- Mobile networks and recharge vendors to fulfil transactions.
- WhatsApp / Meta for messaging features you use.
- Hosting, email, and infrastructure providers.
- Professional advisers or authorities when required by law.
We do not sell personal information. Processors are bound by contracts requiring appropriate security and POPIA compliance where applicable.
6. Retention
We retain information for as long as your account is active and as needed to provide the Services, resolve disputes, enforce agreements, and meet legal retention requirements (including tax and audit records). When you request account deletion, we delete or anonymise data where possible, subject to lawful retention obligations.
7. Security
We implement technical and organisational measures to protect personal information, including access controls, encryption in transit, and monitoring. No system is completely secure - please use strong passwords and protect API keys.
8. Your Rights
Under POPIA you may have the right to:
- Access personal information we hold about you.
- Request correction of inaccurate information.
- Object to processing in certain circumstances.
- Request deletion, subject to legal exceptions.
To exercise these rights, contact hello@shwi.co.za or submit an account deletion request. You may lodge a complaint with the Information Regulator of South Africa.
9. Changes
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date. Continued use after changes constitutes acceptance.