Legal
Privacy Policy
Last updated 13 September 2026
SIC is operated by Wigo zTech in Lusaka, Zambia. This policy explains what personal data SIC handles, why, who helps us process it, and how you control it. We wrote it to be read, not skimmed past.
What this policy covers
It covers the SIC platform at sic.wigoztech.com — the public pages, the dashboard your organisation uses, and the services that run behind it. Where your organisation has a separate written agreement with us, that agreement governs if the two conflict.
For data inside a client organisation's workspace, that organisation decides what goes in and why; we process it on their instructions to provide the service.
Information we collect
Account information
Your name, email address and organisation membership. Passwords are handled by our sign-in provider and stored only in hashed form — we never see them.
Brand and organisation information
What you give SIC to work with: brand names, tone of voice, colours, logos, product details, campaign briefs, reference links, and any presenter avatars you set up.
Connected social accounts
When you connect Facebook or Instagram, Meta gives SIC an access token plus the IDs of the Pages and Instagram accounts you choose. SIC uses the permissions you grant to publish posts, carousels, Reels and videos you have approved; read engagement on those posts; list the Pages you manage; and handle replies to messages. Tokens are encrypted at rest with AES-256-GCM.
Content created in SIC
Drafts, captions, images, videos, voiceovers, edit plans, approval decisions and the platform IDs of anything published.
Product and website information
If you ask SIC to showcase a product, it may visit the website address you provide and record screenshots and short screen clips. If you supply demo login details for that purpose, they are encrypted and used only for that capture.
Access requests
The name, email, organisation, website and message you submit through the request access form.
Technical and usage data
Server logs (such as IP address, browser type and timestamps) kept for security and troubleshooting, and records of each AI task SIC runs — what it did, when, and what it cost — so we can audit the system's behaviour.
Analytics — only with your consent
If you accept analytics, we measure page views and page performance using Vercel Web Analytics and Speed Insights. These tools do not use cookies and report in aggregate. If you decline, they never load.
How we use it
- To provide SIC: generating, reviewing, scheduling and publishing your content.
- To secure accounts, prevent abuse and investigate problems.
- To send service messages — approval requests, password resets, account notices.
- To reply to access requests and support questions.
- To improve SIC's reliability and quality, using aggregated or operational data.
- To meet legal obligations.
We do not sell personal data, use it for advertising, or build profiles of the people who see your posts.
How SIC uses AI
SIC is an agentic AI system: AI models draft copy, plan edits, design visuals, generate voice and footage, and check their own work. To do that, the relevant parts of your brand information and briefs are sent to the AI providers listed below, under their commercial API terms, solely to produce your content.
AI output can be wrong. That is why nothing SIC creates is published until a person in your organisation approves the words and then the visuals.
Wigo zTech does not use your content or your connected-account data to train AI models.
Who helps us process data
We rely on these service providers, each bound to protect the data they handle:
| Provider | Purpose |
|---|---|
| Supabase | Database, sign-in and file storage |
| Vercel | Application hosting and, with your consent, anonymous analytics |
| Anthropic | AI models that plan, write and review content |
| OpenAI | AI models for video scripts and speech |
| ElevenLabs | Voiceover, sound effects and music generation |
| Higgsfield | AI image and video generation |
| n8n | Workflow automation that moves jobs between services |
| GitHub | Build servers that render videos and capture product screens |
| Resend | Transactional email, such as approval requests and password resets |
| Meta Platforms | Publishing to, and reading engagement from, accounts you connect |
| Web search providers | Public trend and reference research requested by the research agent |
Several of these providers operate outside Zambia, including in the United States and the European Union. When data moves across borders, we rely on the provider's contractual and technical safeguards.
How long we keep it
- Account, brand and content data: for as long as your organisation uses SIC.
- Connected-account tokens: until you disconnect the account or your organisation leaves SIC.
- Access requests: up to 12 months, unless they become an active account.
- Server logs: kept for a limited period for security, then deleted.
When an organisation leaves, we delete its data within 30 days, except records we must keep by law. Backups roll off on our providers' standard schedules.
How we protect it
Every organisation's data is isolated at the database level, so one client can never read another's. Social tokens are encrypted at rest, files are served through short-lived signed links, traffic is encrypted in transit, and SIC connects to social platforms only through their official APIs. No system is perfectly secure; if a breach affects your data, we will tell you and the relevant authorities as the law requires.
Your rights
Depending on where you live — including under Zambia's Data Protection Act No. 3 of 2021 and, for people in the EU or UK, the GDPR — you can ask to:
- access the personal data we hold about you;
- correct data that is inaccurate;
- delete your data;
- object to or restrict certain processing;
- receive your data in a portable format; and
- withdraw consent, such as for analytics, at any time.
Email joshuachewe@wigoztech.com. We respond within 30 days. You may also complain to your local data protection authority.
Deleting your data and disconnecting Facebook or Instagram
To remove SIC's access to your Meta accounts:
- In SIC, open Settings → Connections and disconnect the account; or
- In Facebook, go to Settings & privacy → Settings → Business integrations, find SIC and select Remove.
To delete the data SIC holds about you or your organisation, email joshuachewe@wigoztech.com with the subject “SIC data deletion request” and the email address on the account. We confirm receipt and complete deletion within 30 days.
Posts already published to Facebook or Instagram live on those platforms. Deleting your SIC data does not remove them — delete them directly on Facebook or Instagram.
Children
SIC is a business tool and is not directed at anyone under 18. We do not knowingly collect children's personal data.
Changes to this policy
We will update the date above whenever this policy changes, and tell account holders directly about any material change before it takes effect.
Contact
Wigo zTech, Lusaka, Zambia.
joshuachewe@wigoztech.com
See also our Terms of Service.