Effective 7 October 2026
Privacy notice
Zazi is operated in South Africa by Girschen Clingen trading as Zazi. This notice explains how personal information is handled when people use the website, workplace platform, learning records, QuickShift, Ask Zazi and paid business services.
Information Zazi uses
Account and contact details; organisation, role and employment information; course content, lesson progress, quiz results, badges and CV details; business invitations; QuickShift listings and applications; support enquiries; payment references; and technical security logs. Zazi does not collect or store card numbers, card security codes or bank-login credentials.
Why the information is used
To create and protect accounts, provide learning and skills records, manage staff access, generate CVs, operate QuickShift, deliver invitation and recovery emails, answer support requests, prevent abuse, verify payments, maintain financial ledgers and comply with applicable legal duties.
Ask Zazi and AI processing
When a signed-in user chooses Ask Zazi, the question and limited recent conversation or lesson context are sent to OpenAI through its business API to generate a response and perform safety moderation. Zazi sends a one-way hash rather than the user's account ID, requests that response application state is not stored, and does not use the API to make final employment, disciplinary, safety-certification or assessment decisions. OpenAI states that API inputs and outputs are not used to train its models by default; limited abuse-monitoring records may be retained under OpenAI's API data controls.
Service providers and recipients
Information is shared only where reasonably necessary with the organisation administering a staff account and with providers used for hosting, database and authentication, email and AI processing. Current providers include Vercel, Supabase, Yoco and OpenAI. Yoco receives the payment and transaction details needed to process hosted checkout; Zazi keeps the payment reference, amount and status needed for reconciliation. Zazi does not sell personal information to advertisers.
Business accounts and staff records
A business owner or authorised manager can see and manage records belonging to that organisation, including staff membership, assigned learning and team progress. Organisation-scoped permissions are used to prevent one business from reading another business's staff, messages or balances. Employers remain responsible for having a lawful reason to add and manage their staff information.
Security
Zazi uses signed-in access controls, organisation-scoped permissions, server-controlled ledgers, immutable learning evidence, rate limits, bot challenges, moderated AI requests and audit records. No internet service can promise absolute security; suspected misuse or unauthorised access should be reported promptly.
Retention
Information is kept only for as long as needed for an active account, the stated service, learning and employment evidence, security, dispute handling, accounting or legal requirements. Account closure does not automatically erase records that must be retained for those purposes. Records that are no longer required may be deleted or de-identified.
Your rights
You may ask to access, correct or delete inaccurate or unnecessary personal information, object to certain processing, withdraw consent where consent is the legal basis, or ask how your information is used. A request may require identity verification. Some information may lawfully be retained despite a deletion request.
Privacy contact and complaints
Privacy contact: Girschen Clingen. Send requests to girschen@clingen.com. You may also contact the South African Information Regulator.