Privacy policy

Karvo is built by Zavu (Pty) Ltd, Polokwane ("we"). This page explains in plain language how we handle personal information under the Protection of Personal Information Act (POPIA). Last updated: November 2026.

This website

• No forms, no accounts. This site has no forms, so it collects nothing through them. You contact us by phone, WhatsApp or email, when you choose to.
• No trackers. This site currently sets no cookies and runs no analytics or advertising pixels. If that changes, this section will name the tools first.

The demo line

Calls to the demo number (+27 60 053 2310) are answered by an automated assistant for a fictional practice, and are recorded and transcribed so we can improve the product and follow up if you ask us to. The assistant tells you it is automated. Please don't share real health or legal details on a demo call. Ask us to delete a demo recording at any time and we will.

When Karvo answers calls for a client

When a practice or firm uses Karvo, we process its callers' personal information (name, number, what they called about, and the recording and transcript) on behalf of that client, who is the responsible party under POPIA. Zavu (Pty) Ltd is the operator, under a written operator agreement as POPIA section 21 requires. The information is used to run that client's front desk and for nothing else: no sale of data, no marketing lists, no sharing between clients. Callers are told at the start that they are speaking to an automated assistant and that the call is recorded.

Health information and privileged information

A caller to a medical practice may mention their health. Health information is special personal information under POPIA section 26, and we handle it only as the practice's operator. Karvo doesn't ask for clinical detail beyond what a booking needs, and gives no medical advice. For law firms, a confidentiality agreement covering privileged information is signed alongside the operator agreement.

The operator agreement names where data is stored. Where that is outside South Africa, transfers rely on POPIA section 72. Data is deleted on request, and within 30 days of a client's pilot or contract ending.

Your rights (POPIA ss 23 to 25)

• Ask what personal information we hold about you, and receive a copy.
• Ask us to correct or delete it.
• Object to processing, and complain to the Information Regulator (inforegulator.org.za) if we don't resolve it.

If you called one of our clients, you can also ask that practice or firm directly, since they are the responsible party.

Contact and Information Officer

Information Officer: [INFORMATION-OFFICER-NAME], Zavu (Pty) Ltd, Polokwane. Email [CONTACT-EMAIL] or WhatsApp us.

This page is a plain-language summary of our practices, not legal advice to you. See also how Karvo handles POPIA and HPCSA Booklet 20.