Privacy Policy

Responsible party, scope, and privacy contact

Tradegrow Pty Ltd, registration number 2024/207287/07, trading as AI Airtime, operates Askly and is the developer and responsible party for the Android app, iOS app, PWA, checkout pages, support pages, and related backend services. Our physical address is 44 Schumann street, SW5, Vanderbijlpark, 1911, South Africa. The designated Information Officer is Jarrod Dawson. POPIA, privacy, account deletion, and access-to-information requests can be sent to legal@askly.site. Support requests can be sent to support@askly.site.

TikTok enquiries and lead generation

Supplementary notice updated 22 September 2026. This notice applies when you contact Askly through TikTok messages, Message Assistant, or a lead form on our profile or advertisement, whether or not you have an Askly account. Read it together with the rest of this Privacy Policy. We receive the information you choose to share, such as your name or TikTok username, email address, phone or WhatsApp number, country, preferred contact method, questions, and interest in our services. Depending on the feature, TikTok may also provide the associated profile, conversation, form, advertisement or campaign identifiers and submission time. We keep relevant permission, follow-up and opt-out records. Providing contact details is voluntary. Without a suitable contact method, we may be unable to respond outside TikTok or provide the follow-up you request. You can visit our website without submitting a TikTok lead form. Please do not send passwords, full payment-card details, identity documents or sensitive personal information through a lead form or social-media enquiry.

How Askly uses TikTok leads and contact permissions

We use your enquiry and contact details to answer questions, explain Askly, help you get started, provide requested support, organise and follow up enquiries, and understand which campaigns generate interest. We contact you through the channel you request or agree to, such as TikTok, email or WhatsApp; sharing a phone number does not by itself request a sales call. Where applicable, our grounds for processing are taking steps you request before a contract, providing a service, our legitimate interests in managing enquiries and preventing misuse, compliance with legal obligations, and your consent where required. These grounds do not override the rules for unsolicited electronic marketing. Submitting an enquiry, accepting the Askly account terms, or reading this notice does not automatically subscribe you to ongoing marketing. We send promotional email, SMS or WhatsApp messages only with the required consent or where an applicable existing-customer exception permits it, including the conditions in POPIA section 69 for South African customers. Any marketing choice must identify the purpose and channel and be separate from a request for help. You may decline marketing and still ask questions or use Askly. You can withdraw marketing permission or ask us to stop follow-ups by replying to our message, using an unsubscribe option where available, or emailing legal@askly.site. An opt-out does not prevent a response to a new request you initiate or essential account and transaction messages.

TikTok Message Assistant and TikTok's own use of information

When enabled, TikTok's Message Assistant provides automated replies using the business information we supply. TikTok processes the conversation to operate this feature, and authorised members of our team can view the conversation and respond. If lead capture is enabled for the feature in use, contact details you provide may be saved in TikTok Leads Center and made available to us. You can ask to speak to a person. TikTok also processes information as the operator of its platform under its own privacy policy, rather than only on our behalf. Its disclosed purposes include providing and improving its services and technology, safety and fraud prevention, analytics, and advertising measurement and personalisation, subject to applicable law and your settings. TikTok may process messages, device and usage information and, where applicable, lead-form information for those purposes. Its own policy explains its recipients, international processing, retention and your choices. This notice describes Askly's handling of your enquiry; it does not replace TikTok's privacy policy or control TikTok's separate processing. The model-training statement below describes our Askly AI service and does not make a promise about TikTok's processing of messages on its platform.

• Read TikTok's Privacy Policy
• Contact TikTok about your privacy rights

TikTok lead access, retention and your rights

Enquiries and lead records are accessible to authorised Askly team members and the service providers needed to manage or respond to them. Where we export a lead or use a connected customer-management or messaging service, this notice also applies to our copy and our use of that service. We do not sell lead contact details or provide them to other businesses for their own marketing. TikTok and relevant hosting, communications or support providers may store or process information outside your country. Our transfers are subject to applicable safeguards, including POPIA section 72 where relevant; TikTok explains its separate international processing in its own policy. We keep enquiry and lead information only for as long as needed to handle the enquiry, provide an agreed follow-up or maintain a permitted customer relationship. When those purposes end, we delete or de-identify it unless a legal, security or dispute-related reason requires retention. We may retain limited permission and suppression records to demonstrate consent and honour an opt-out. TikTok's own retention periods are separate: deleting an Askly account or asking us to delete our lead record does not itself delete TikTok's records. You do not need an Askly account to request access, correction or deletion of a lead record, object to its use, or withdraw consent. Contact our Information Officer at legal@askly.site, giving the contact detail or TikTok username you used and enough context to locate the enquiry. We may reasonably verify your identity before acting. Contact TikTok through its privacy tools for information it holds independently. Your right to complain to the relevant data-protection authority, including South Africa's Information Regulator, remains available.

• Email Askly's Information Officer
• South Africa's Information Regulator

Information we collect

For registered accounts we process identifiers and account details such as email address, phone number, display name, tenant, market, authentication session, language preference, legal-consent timestamps, Balance and immutable ledger records, top-ups, vouchers, payment references, and support activity. When you use an approved messaging channel, we may also process the channel and provider identifier, a provider-issued pseudonymous contact or conversation identifier, language and market routing, commands and responses, delivery and retry status, opt-in or opt-out state, account-link and consent timestamps, and short-lived handoff-session records. One-time handoff codes and checkout sessions are limited to the action and expiry shown. For guests we create pseudonymous local session and device identifiers and may process a limited device-environment fingerprint to enforce the two-free-question allowance and prevent abuse. This can include browser, operating system, language, screen, timezone, and device-capability signals. When you use AI, we process prompts, responses, selected answer mode and provider, conversation history, metering and monetary charge records, and any text, document, image, or other file you choose to upload.

How we use information

We use information to create and protect accounts, provide guest and approved messaging access, route commands to the correct tenant, market, and region, enforce abuse and rate limits, record consent and account-link choices, deliver and retry messages, process Balance top-ups and vouchers, maintain Balance and ledger integrity, provide AI services, show charges after completed requests, retain conversation history, support customers, investigate failures, and produce tenant-level operational and financial reporting. We also process diagnostics, IP address, browser or app version, crash and error logs, referral and campaign identifiers, ad click identifiers, checkout events, and resettable analytics identifiers where those tools are enabled.

Prompts, uploads, AI providers, and cross-border processing

Prompts, selected uploads, and AI interaction data may be routed to specialist AI and infrastructure providers in jurisdictions including the United States, the European Union, and other territories. We use contractual and technical safeguards appropriate to the service and applicable data-protection law, including POPIA Section 72 where relevant. Only attach content you are permitted to share. Askly does not require background location, precise location, contacts, SMS, call logs, health data, microphone recordings, or unrestricted access to your photo library for the core service.

Model training

Askly does not use customer prompts, uploaded documents, or private conversation histories to train foundational AI models. We configure and contract with service providers to restrict model-training use where their services support those controls.

Payments, Balance, vouchers, and service records

Configured payment providers handle card, wallet, QR, or hosted-checkout details. On iPhone and iPad, Apple processes in-app purchases and supplies a signed transaction record for server verification. Askly stores payment status, gross amount, wallet value, separately disclosed payment-fee or customer-price-adjustment records, transaction references, idempotency keys, provider names, top-up and voucher records, completed AI-service charges, reversals, refunds, and ledger balances. Askly does not receive or store the payment credentials used for an App Store purchase, and the PWA does not need to store full card numbers. Balance values are recorded in the configured local currency. New Balance funds and voucher values do not expire. Historical ledger entries may retain legacy descriptions where required for accounting and dispute records.

Analytics and advertising measurement

When enabled, analytics and advertising measurement tools may process app opens, sign-ups, top-up and voucher funnels, completed purchases, feature use, diagnostics, campaign identifiers, and aggregate product performance. We use this information to operate and improve the service and to understand which campaigns led to registrations or purchases. Google Play Data safety and Apple App Privacy disclosures must remain consistent with this policy and the app's actual handling of account identifiers, contact information, user content, purchases, product interaction, diagnostics, and analytics identifiers.

Sharing and service providers

We share data only as needed with tenant administrators, approved business-messaging providers, payment providers, AI providers, infrastructure and analytics providers, fraud-prevention services, support operators, professional advisers, app-store reviewers where necessary, and public authorities where lawfully required. A messaging provider may receive the destination identifier, message content required for delivery, delivery status, and a secure PWA link; it does not receive your Askly password or full card details. Providers must process data for disclosed purposes and protect it appropriately. We do not sell prompts, uploaded content, Balance history, messaging contact identifiers, or account details.

Security

Askly uses encrypted transport, backend-controlled authentication, tenant-scoped authorization, restricted administrative access, server-side monetary and usage checks, immutable financial ledger records, idempotency controls, operational logs, and hosted checkout where configured. No system can be guaranteed perfectly secure, but public app screens do not expose passwords, full card numbers, raw access tokens, backend secrets, or internal provider credentials.

Retention, deletion, rights, and complaints

Request account deletion or exercise applicable access, correction, export, objection, consent-withdrawal, or deletion rights by contacting legal@askly.site or support@askly.site. Include the account identifier, market, and the nature of the request. You may also use the supported STOP or opt-out command to stop non-essential messaging where that channel offers it. We delete or de-identify account, guest, messaging-session, and delivery data where law and platform-integrity requirements allow. One-time handoff codes and sessions expire and are not retained as reusable credentials. Limited security, fraud, messaging-consent, delivery, tax, accounting, immutable ledger, dispute, legal-compliance, and proof-of-request records may be retained for the required period. Account closure does not remove statutory refund, reversal, complaint, or other remedies that apply to remaining Balance or disputed transactions. You may contact South Africa's Information Regulator at POPIAComplaints@inforegulator.org.za if you believe your POPIA rights have not been respected.