Privacy Policy
Last updated: November 2026
This policy is presented for your country and is designed to comply with the data-protection and privacy laws applicable in your country of residence.
1. Introduction
This Privacy Policy explains how Betty ("we", "us"), an AI office assistant operated by Vertex Catalyst Group, collects, uses and protects your information when you use bettygenius.co.za (the "Service"). We apply the protections required where you live.
2. Information We Collect
We collect: (a) what you give us when you register: name, email address and country, or, if you choose "Continue with Google", your name and email address from Google; (b) your settings, such as your timezone; (c) the messages you exchange with Betty, the files you attach or upload (PDFs, images and spreadsheets), the documents and images you create, your notes, and the calendar events and tasks you add; (d) technical data needed to run and secure the Service, such as your IP address, browser and device information and cookies; and (e) if you subscribe, billing information such as your plan, payment dates, amounts and currency. Your card details are entered on our payment provider's secure page and are never received or stored by us.
3. Legal Basis for Processing
We process your personal data on the basis of your consent and as necessary to provide the Service you request.
4. How We Use Your Information
- To provide the Service: answering your messages, reading the files you attach, and creating and storing your documents.
- To run your account and subscription, and to send you service emails (for example password resets and billing notices).
- To keep the Service secure, prevent abuse and fix problems.
- To meet our legal obligations, for example tax and accounting records.
We do not sell your personal information, and we do not use your conversations or files to train AI models.
5. AI Processing
To answer you, your messages, the relevant earlier messages of the conversation and summaries of your attached files are sent to our AI providers (see section 12). So that Betty can help you plan, your calendar for the next 7 days and your open tasks are sent with your message (including events from a connected Google or Outlook calendar), and Betty can suggest an event or task, which is only added when you press the button. They process the data only to produce the answer, under their business terms, which do not allow them to use it to train their models. Answers are stored in your account so you can see your history.
6. Storage and Security
The Service and its database are hosted in South Africa. Attached files are stored outside the public part of the website and are never served directly. Connections are encrypted (HTTPS), passwords are stored only as secure hashes, and access to the servers is restricted to authorised Vertex staff.
7. Data Retention
We keep your account and its content for as long as your account is active, and afterwards only as long as needed for the purposes in this policy or as the law requires. You can ask us to close your account at any time.
When you delete something yourself (a conversation with its attached files, a document, a note, an image or a data analysis with its spreadsheet), it is removed from Betty for real: it no longer appears in your account, is no longer used by Betty, and is no longer visible to our administrators. Because the deletion is your choice, we keep a sealed copy only in a protected archive outside the Service, which is covered by our backups and used solely to restore data at your request, to answer a data-access request from you, or where the law requires it. This archived copy is kept for 24 months and then permanently erased.
Billing and payment records are kept for as long as tax and accounting laws require.
Invoices. For every payment we issue an invoice (and a credit note for a refund) in your name and e-mail address. Invoices issued to you are kept for 7 years after the financial year in which they were issued, because tax law requires it. If your account is closed, they are no longer linked to your account. After that period the customer details on them are deleted or anonymised.
8. International Transfers
Some of our providers process data outside your country: our AI providers (section 12), our payment provider Stripe, our email provider, and Google if you use "Continue with Google". Our backups are kept on a server operated by Vertex Catalyst Group in the United States of America. Where your data leaves your jurisdiction, we rely on appropriate safeguards as required by applicable data-protection law (for South Africa, section 72 of POPIA).
9. Your Rights
Under the data-protection and privacy laws applicable in your country of residence, you have the following rights:
- Right to access the personal data we hold about you
- Right to request correction of inaccurate data
- Right to request deletion of your data
- Right to object to or restrict certain processing
- Right to withdraw consent
- Right to complain to your local data-protection authority
To exercise any of these rights, including getting a copy of your data, contact us through our contact form. You also have the right to complain to the data-protection or privacy authority in your jurisdiction.
10. Cookies
We use cookies as described in our Cookie Policy, which is also tailored to your country.
11. Payments and Subscriptions
Paid plans are billed through Stripe, our payment provider. Stripe receives your name, email address and the plan you choose, and processes your card on its own secure page. We never see or store your card number. We keep a record of your payments (dates, amounts, plan) for accounting.
12. Third-Party Processing
We use these service providers, each only for the purpose stated:
- AI providers: Google (Gemini), Groq and Anthropic (Claude) - to generate answers and images and to read attached files.
- Stripe - payments and subscriptions.
- Cloudflare Turnstile - the security check on our sign-up, log-in, contact and password-reset forms, which keeps automated abuse out. Cloudflare receives only what the check needs (your IP address and technical browser signals), never what you type into the form.
- SMTP2GO - sending service emails.
- Google - "Continue with Google" sign-in, if you choose it (we receive only your name, email address and a Google account identifier).
- Google (Drive, Calendar, Tasks) / Microsoft (OneDrive, Outlook calendar, To Do) - only if you connect them: Betty saves the documents you choose there and can only see the files it saved; it adds the events and tasks you create in Betty to your calendar and task list, and reads your calendar (not stored by us) to show your plans and warn about clashes. The access keys are stored encrypted, and you can disconnect at any time in My Profile.
13. Google User Data
If you connect your Google account, Betty asks Google only for the access each feature needs, and only when you choose that feature:
- Sign-in ("Continue with Google"): your name, email address and Google account identifier, to create and open your account.
- Google Drive (only the files Betty creates): to save a document there when you press "Save to Google Drive". Betty cannot see your other files.
- Google Calendar (events): to add the events you create or confirm in Betty to your calendar, change or remove them when you do so in Betty, and read your upcoming events so that Betty can show your plans and warn you about clashes.
- Google Tasks: to add the tasks you create or confirm in Betty to your task list, and update or remove them when you do so in Betty.
How we use it. We use Google user data only to provide these features to you. Events read from your Google Calendar are not saved in our database: they are read when you open the calendar or send a chat message, a short list is kept for at most 5 minutes in your login session (so that a conversation does not ask Google again for every message), and then discarded. If Betty mentions one of your events in a reply, that reply is saved in your conversation like any other message. We store only the events and tasks you create in Betty, with the identifier of their copy in Google so we can keep it up to date. Your Google access keys are stored encrypted.
Sharing. We do not sell Google user data, use it for advertising, or let anyone read it. The only transfer is to our AI providers (section 5): when you chat, your next 7 days of events and your open tasks go with your message so that Betty can answer you. They process it only to produce that answer and may not use it to train their models. We do not use Google user data to develop, improve or train generalised AI or machine-learning models.
Your control. You can disconnect Google at any time in My Profile → Security (this also withdraws Betty's access at Google), or at myaccount.google.com/permissions. Events and tasks you created stay in Betty until you delete them; what you delete is handled as in section 7.
Betty's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
14. Children's Privacy
Betty is meant for adults using it for work. It is not directed at children under 18, and we do not knowingly collect their personal information.
15. Changes to This Policy
We may update this policy from time to time. The date at the top shows the latest version; we will tell you about important changes by email or in the Service.
16. Contact
Questions about this policy or your data can be sent through our contact form.