A
AI4 Smart Automations

Privacy Policy

Last updated: 28 June 2026

This Privacy Policy explains how Jonas Mohlala, a sole proprietor trading as AI4 Smart Automations ("AI4 Smart Automations", "we", "us", or "our"), collects, uses, discloses, and safeguards information when you use our website, our business automation services, and any application that connects to your Google Business Profile (collectively, the "Service").

We are committed to protecting your privacy in accordance with South Africa's Protection of Personal Information Act (POPIA). If you are located outside South Africa, we also aim to honor the principles of applicable data protection laws such as the GDPR and CCPA where relevant to your use of the Service.

1. Who We Are

AI4 Smart Automations is operated by Jonas Mohlala, a sole proprietor based in Kimberley, South Africa. We build AI-powered websites and automation systems for local businesses, including tools that connect to a client's Google Business Profile to help manage their online presence (such as reviews, business information, and posts).

For the purposes of POPIA and other applicable data protection laws, Jonas Mohlala (trading as AI4 Smart Automations) is the "responsible party" / "data controller" for personal information processed through the Service.

2. What Data We Access

When a business owner ("Client") chooses to connect their Google Business Profile to our Service, they authenticate directly with Google using Google's own OAuth sign-in flow. We never see or handle the Client's Google account password. Through this authorization, and depending on the permissions the Client grants, we may access:

We only request the scopes of access necessary to provide the specific automation or display feature the Client has enabled (for example, displaying reviews on their website, or automating responses to new reviews).

3. How We Use This Data

We use the data described above solely to:

We do not use Google Business Profile data for advertising, do not sell it, and do not use it to build user profiles for any purpose other than delivering the Service to the Client who authorized the connection.

4. How We Store and Protect Data

We do not maintain a general-purpose database of Client business data or review content. Business profile data and review content are retrieved on demand and passed through our automation workflows (run on n8n) to perform the task the Client configured; they are not permanently archived by us beyond what is needed to operate the workflow.

OAuth access and refresh tokens are the exception: because some automations run on a schedule (for example, checking for new reviews daily) rather than only while the Client is actively present, we retain encrypted OAuth tokens for as long as the Client keeps the relevant automation active. Tokens are stored securely within our n8n credential store, access to which is restricted to AI4 Smart Automations. A Client may revoke this access at any time (see Section 6), which deletes the stored token on our side and immediately stops any further access.

We do not share, sell, or disclose Client Google Business Profile data to any third party, except to the extent strictly necessary to operate the Service (e.g. our n8n hosting infrastructure acting as a processor on our behalf) or where required by law.

5. Google API Services User Data Policy

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use data obtained through Google Business Profile API access to serve advertisements, and we do not allow humans to read this data except as necessary for security purposes, to comply with applicable law, or with the Client's affirmative consent for a specific, user-facing feature they requested.

6. Client Control and Revocation

Clients remain in control of the connection between their Google Business Profile and our Service at all times. A Client may:

7. Other Personal Information We Collect

Separately from Google Business Profile data, when you submit an enquiry or strategy-call request through our website, we collect the name, email address, business type, and message you provide. We use this information only to respond to your enquiry and, if you proceed, to deliver our services to you. We do not sell this information.

8. Data Retention

We retain OAuth tokens and related automation configuration only for as long as the Client's automation remains active. Enquiry form submissions are retained only as long as needed to respond to the enquiry and, where the Client becomes a customer, for the duration of the business relationship. We delete data on request as described in Section 6.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will post the updated policy at this URL with a revised "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights regarding your personal information, please contact:

Jonas Mohlala, trading as AI4 Smart Automations
6 Jan Celliers Street, Kimberley, South Africa
Email: jonas.mohlala@gmail.com