Privacy Policy

Gochi (gochi.tech) is a business management platform for managed service providers and their clients, developed and operated by Tellurium Technologies (Pty) Ltd, a company registered in South Africa (“Tellurium”, “we”, “us”). Registered address: Unit 11, APD Industrial Park, Elsecar St, Kya Sand, Randburg, 2163, South Africa. Privacy contact: welcome@gochi.tech.

Under the Protection of Personal Information Act, 2013 (POPIA), Tellurium is the responsible party for personal information we collect about our own customers and website visitors, and acts as an operator (processor) for personal information our customers store in Gochi about their own clients and end users. Where the EU or UK General Data Protection Regulation applies, the equivalent roles are controller and processor respectively.

Our Information Officer, as required by POPIA, can be reached at welcome@gochi.tech.

EU and UK representatives. Tellurium is established in South Africa and serves customers internationally. We have no office or establishment in the European Union or the United Kingdom. Where Article 27 of the GDPR or of the UK GDPR requires us to designate a representative in those territories, we will do so and name them here. Wherever you are, you can reach us directly at welcome@gochi.tech, and we will honour the rights described in this policy regardless of which law gives them to you.

Account information

Name, email address, phone number, password (stored as a salted hash), and two-factor sign-in settings, including passkeys (we hold only a passkey's public part, never the private key on your device).

Customer relationship data

Contacts, companies, deals, tickets, contracts and related records that our customers create or import into Gochi about their own clients. Tellurium processes this data on the customer's instructions.

Email data

Where a customer connects a mailbox (Microsoft 365, Gmail or another mail server), Gochi ingests message headers and content in order to display, thread and link email to customer records, and sends the email its users write. Where a user connects their own mailbox, the email they send from it outside Gochi may also be logged on the matching client's record.

WhatsApp messages

Where a customer connects their own WhatsApp Business account, Gochi receives the messages, photos, documents and voice notes their clients send to that number, with the sender's WhatsApp number and profile name, and keeps them as chats in the customer's Omni-Channel. The customer's team may turn a chat into a support ticket. Replies and message templates the customer sends are passed to Meta for delivery, and Meta's delivery and read receipts are recorded against them. If a client replies STOP, Gochi records that and sends them no further templates.

Facebook Messenger and Instagram messages

Where a customer connects a Facebook Page and the Instagram professional account linked to it, Gochi receives the messages people send to that Page on Messenger and to that Instagram account, with the photos and files they send and the name and profile identifier Meta provides, and keeps them as chats in the customer's Omni-Channel. The replies the customer's team sends are passed to Meta for delivery.

Website chat

Where a customer adds the Gochi chat to their own website, Gochi receives what visitors type into it, and the name and email address they choose to give, and keeps them as chats for the customer's team.

SMS and calls

Where a customer connects an SMS provider or a phone system, Gochi keeps the phone numbers and text of the SMS messages sent and received, and the call records (who called whom, when and for how long, and call quality where the phone system measures it). Call recordings are read from the customer's phone system or storage when a user plays them.

Meetings and calendars

For video meetings and the calendar in Remote Office: meeting times, the names of people invited and the email addresses of outside guests, and chat messages and files shared in rooms. Meeting audio and video are end-to-end encrypted and are not recorded by Gochi. Where a host switches on a transcript, each participant's own browser turns their speech into text using the browser's speech service (for example Google's in Chrome or Microsoft's in Edge), and the text is posted to the meeting. Where a user connects their Outlook or Google calendar, Gochi reads only when they are busy, never what their meetings are, and writes their Gochi bookings into it.

Booking pages

Where a customer publishes a booking page or sends a link to pick a time, Gochi records the name, email address, any answers and the time chosen by the person who books.

HR records

Where a customer uses Gochi HR, for its staff whether or not they use Gochi: employee details such as job and its dated history, site, start and leaving dates, probation, contact and emergency contact details, ID and tax numbers, pay and bank details, leave requests and balances, and documents such as employment contracts. Pay and bank details are visible only to the people the customer chooses; ID, tax and bank numbers are shown masked to others; bank details change only with a second person's approval; and every change is logged. Sick notes are kept with restricted access, and every opening of one is logged. Staff with an HR self-service login see and update their own details.

Gochi AI

Where a customer gives a user a Gochi AI seat and that user asks Gochi AI for help (for example a ticket summary, a reply draft or an answer about their own figures), the text needed for that request is sent to our AI sub-processor, Anthropic, to produce the answer. Before it is sent, names of the people involved, email addresses, phone numbers, ID, card and bank account numbers, and passwords and keys in it are replaced with placeholders. A supplier invoice PDF that a user asks Gochi AI to read is sent as it is. Anthropic may not use this data to train its models.

Device telemetry

Where a customer installs the Gochi infrastructure agent on a device, the agent reports the hostname, hardware and operating system details, resource metrics (CPU, memory, disk), network addresses, the username of the person signed in to the device, and an inventory of installed software, for monitoring, updates and remote support. The agent is installed by the customer, on devices it manages.

Remote support sessions

Remote desktop works on Windows devices. Before a technician can see or control a device, the person signed in to it is asked to allow it, and nothing happens unless they agree. While the session runs, a banner on their screen names the technician and lets them end it. The session is end-to-end encrypted, so Gochi's servers pass it on without being able to see the screen. We record that a session took place, who started it, when, and for how long; we do not record the screen.

Documents and signatures

Documents generated or uploaded for approval and electronic signature, including signature data, and an audit trail of who signed and when. Signed documents are encrypted at rest.

Connected platform tokens

Where a customer connects a third-party account (for example a social media or advertising account), we store the access tokens needed to act on the customer's instructions. Tokens are encrypted at rest and can be disconnected at any time.

Marketing campaign data

Where a customer sends an email campaign through Gochi, we record deliveries, bounces, unsubscribes, and whether a message was opened or a link clicked, so the customer can measure the campaign and honour opt-outs. Where a customer switches on tracking for emails its salespeople send one by one, we record opens and clicks on those emails too.

Notifications

Where a user turns on notifications in their browser, the title and text of each notification are sent through their browser maker's push service (for example Google's for Chrome or Apple's for Safari), encrypted so that the push service cannot read them.

Usage and log data

Sign-in events, audit records of actions taken in the platform, IP addresses, and basic analytics about how the product is used.

Cookies

Gochi sets only cookies that are strictly necessary to provide the service you have asked for: for example, one keeps you signed in, and one remembers that your browser has passed two-factor sign-in. We do not use analytics cookies, advertising cookies, or third-party trackers on this website, so no cookie consent banner is needed. Your theme preference is stored locally in your browser and is never sent to us.

Website analytics we provide to customers

Customers can place a Gochi analytics snippet on their own website. It records the page visited, an approximate country derived from the request, and whether the device is a desktop, tablet or phone. It sets no cookies and does not store the visitor's IP address. The customer is the responsible party for that data and for any notice they must give their own visitors.

• To provide, operate and secure the Gochi platform.
• To act on our customers' instructions — e.g. sending an email campaign, generating a document, monitoring a device, answering a client's WhatsApp message, or producing a Gochi AI draft a user asked for.
• To provide support, investigate incidents, and maintain audit trails.
• To improve the product, using aggregated or de-identified usage data.
• To meet legal obligations.

We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use customer data to train artificial-intelligence models.

Where the GDPR applies, we rely on the following bases. POPIA recognises equivalent grounds of justification.

Performance of a contract

Providing the platform to the customer who has subscribed to it, including hosting their data and carrying out the actions they request.

Legitimate interests

Securing the service, preventing abuse, maintaining audit trails, and improving the product using aggregated or de-identified data. We balance these against your rights and interests.

Consent

Installing the device agent on a machine, and connecting a third-party account. Consent can be withdrawn at any time — by uninstalling the agent or disconnecting the account.

Legal obligation

Retaining records and responding to lawful requests where the law requires it.

Where we act as an operator or processor for a customer, that customer determines the purpose and lawful basis for the data they store about their own clients.

Customers may connect third-party accounts (such as Microsoft 365, Google, and Meta for WhatsApp, Facebook and Instagram) to Gochi. When you connect an account, you authorise Gochi to access that account only to the extent of the permissions shown on the platform's consent screen, and only to carry out the actions you request in Gochi. You can revoke this access at any time, either in Gochi or in the third-party platform's own security settings, and we will delete the stored tokens.

What we access from each platform, and why:

Facebook Pages and Instagram (Meta)

Where you connect a Facebook Page and the Instagram professional account linked to it, through Gochi's Meta app: the name, picture and identifier of the Page and account, so we can show you which ones are linked; and the messages people send to the Page on Messenger and to the Instagram account, with their name and profile identifier as Meta provides them and the photos and files they send, so your team can read them and reply in Gochi. The replies your team sends are passed to Meta for delivery, and Meta's delivery and read receipts are recorded. We do not read your personal profile, your friends, or your Page's posts and comments, and we do not post anything to your Page.

WhatsApp Business (Meta)

Where you connect your own WhatsApp Business account, through Meta's sign-up inside Gochi: the messages your clients send to your number, which arrive as chats (your team may turn a chat into a ticket); the details of your number and your approved message templates, so Gochi can check the connection and send them; and delivery and read receipts for what you send. We do not read other numbers on your account, and we only send the messages you or your team send from Gochi.

Microsoft 365

Where you sign in with Microsoft: your name, email address and account identifiers. Where you connect a mailbox: the messages in it, so Gochi can display, thread and link email to your customer records and send the email you write. Where you allow it: when your calendar is busy (never what the meetings are), so people can book free times with you, and permission to write your Gochi bookings into your calendar, including as Microsoft Teams meetings.

Google

Where you connect a Gmail or Google Workspace mailbox: the messages in it, so Gochi can display, thread and link email to your customer records and send the email you write. Where you connect Google Calendar: when you are busy, the meetings Gochi writes into it, and, if you choose, events with guests who are your CRM contacts. Where you connect a Google Business Profile: its reviews, and the replies your team writes. We do not read your Drive or any other Google data.

We use data from these platforms only to provide the features you asked for. We do not sell it, we do not transfer it to anyone except as needed to provide the service at your instruction, we do not use it for advertising, and we do not use it to train artificial-intelligence models. Access tokens are encrypted at rest and are deleted when you disconnect the account.

Gochi's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

To disconnect an account or have the data we hold from it deleted, follow the steps at gochi.tech/data-deletion.

We share personal information only with: (a) service providers who host and operate our infrastructure and the features our customers use, such as our hosting provider, the Microsoft 365 service that delivers Gochi's email, and Anthropic for Gochi AI where a customer uses it; (b) third-party platforms, when and only because a customer has connected them and instructed an action; and (c) authorities where the law requires it. We require operators processing data on our behalf to protect it to the standards required by POPIA and, where applicable, to be bound by terms meeting Article 28 of the GDPR.

If your admin lets Gochi support in, named Gochi staff can access your organisation at the level and for the time your admin chooses; every access is logged in your audit log and your admins are notified.

Our current sub-processors are published at gochi.tech/subprocessors, with what each one does and where it is located. Before adding or replacing a sub-processor we update that page and notify account holders at least 30 days in advance, and you may object within 30 days — the process and consequences are set out there. We remain fully liable for our sub-processors' performance under Article 28(4) of the GDPR.

We use appropriate technical and organisational measures, including encryption in transit (TLS), encryption at rest, role-based access control, tenant isolation, audit logging, two-factor sign-in for every user (an authenticator app or a passkey), end-to-end encrypted remote desktop sessions and video meetings, and hardened remote-access controls. Passwords are stored only as salted hashes and are never recoverable. More detail is on our security page.

Stored credentials, third-party access tokens and signed documents saved from July 2026 onward are encrypted with AES-256-GCM. A small number of older records predate that change: signed documents from before it use an earlier encryption scheme, and some credentials stored before encryption was introduced remain unencrypted until they are next saved. We are migrating both.

No system is perfectly secure. Under POPIA we notify the Information Regulator and every affected data subject of any security compromise, as soon as reasonably possible after discovering it — POPIA sets no risk threshold and no exemption for encrypted data, so this applies to all qualifying incidents.

Where the GDPR or UK GDPR applies and we are acting as controller, we notify the relevant supervisory authority without undue delay and within 72 hours of becoming aware of a personal data breach, unless it is unlikely to result in a risk to people's rights and freedoms, and we tell affected individuals where the risk to them is high. Where we act as a processor for a customer, we notify that customer without undue delay so they can meet their own deadlines.

We keep personal information for as long as the customer account it belongs to is active. After an account is closed we delete or de-identify personal information within 90 days, unless the law requires us to keep it longer.

When you delete a record inside the platform it is immediately removed from view and from every list, report and search — it can be restored during a short grace period, and is then permanently erased by an automated job that runs daily and removes anything deleted more than 7 days ago. Copies held in encrypted backups age out on our normal backup rotation. Audit and security logs are kept longer than ordinary records, because we need them to investigate incidents and to meet our accountability obligations.

To request deletion of your data, email welcome@gochi.tech — this includes data obtained from connected third-party platforms.

Under POPIA you may request access to, correction of, or deletion of your personal information, and you may object to processing. Where the GDPR or UK GDPR applies, you also have the right to restrict processing, to receive your data in a portable format, and to withdraw consent at any time without affecting processing already carried out.

We do not make decisions producing legal or similarly significant effects about you by solely automated means, and we do not carry out profiling of that kind.

Where our customer is the responsible party for data about you (for example, you are a client of a business that uses Gochi), we will refer your request to them and assist them in responding. You may lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za, or, if you are in the EU or UK, with your local supervisory authority.

Gochi is hosted in South Africa, with cloud.co.za. Some of our sub-processors work outside South Africa: for example Anthropic, which runs Gochi AI in the United States, and Meta, which delivers WhatsApp, Messenger and Instagram messages. Where a customer connects an international third-party platform, data flows to that platform under its own terms.

South Africa has not been designated by the European Commission or the UK as providing an adequate level of protection. Where personal information reaches us from the European Economic Area, we rely on the European Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914), using Module Two where our customer is the controller and we act as processor. For transfers from the United Kingdom we use the same clauses together with the ICO's International Data Transfer Addendum, and we carry out and document the transfer risk assessment (the “data protection test”) that UK law requires. We apply supplementary measures where an assessment shows they are needed.

Where we transfer personal information out of South Africa ourselves — for example to a sub-processor — we do so only on conditions meeting section 72 of POPIA, including binding terms that carry equivalent protection through to any onward transfer.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined in the California Consumer Privacy Act as amended by the CPRA. Because we do neither, we do not provide a “Do Not Sell or Share My Personal Information” link, and we do not act on opt-out preference signals for those purposes.

Where a US business uses Gochi to process personal information about its own customers or staff, we act as that business's service provider (or the equivalent term in other state laws). We use that information only to provide the service under our contract, never for our own purposes, and we delete it on the business's instruction.

Residents of US states with comprehensive privacy laws may have rights to know what personal information we hold about them, to correct or delete it, to obtain a copy, and to appeal a refused request. If a business is the controller of data about you, we will refer your request to them and help them respond. Otherwise, contact welcome@gochi.tech. We will not discriminate against you for exercising any of these rights.

Gochi is a business tool and is not directed at children. We do not knowingly collect personal information from children.

We will post any changes to this policy on this page and update the effective date. Material changes will be notified to account holders.

Tellurium Technologies (Pty) Ltd · Unit 11, APD Industrial Park, Elsecar St, Kya Sand, Randburg, 2163, South Africa · welcome@gochi.tech

See also our Terms of Service.