Effective 31 August 2026 · version 2026-08-31.1
PAIA Manual of Amax Digital (Pty) Ltd
This manual is prepared under section 51 of the Promotion of Access to Information Act 2 of 2000 (PAIA), with reference to the Protection of Personal Information Act 4 of 2013 (POPIA). It explains the records held by Amax Digital (Pty) Ltd, trading as SAYDO, and how a person may request access to a record. Listing a category does not confirm that a particular record exists or that PAIA requires it to be disclosed.
1. Private body details
- Registered name
- Amax Digital (Pty) Ltd
- Registration number
- 2021/365987/07
- Trading name
- SAYDO
- Registered, physical and legal-service address
- 262 Jack Hindon Street, Pretoria, Gauteng, 0182, South Africa
- Head / Information Officer
- The head of Amax Digital (Pty) Ltd in the statutory capacity provided by PAIA and POPIA
- info@saydo.co.za
- Telephone
- +27 12 761 7894
- Website
- https://saydo.co.za/
No Information Officer registration number is stated in this manual because Amax Digital does not publish or claim a reference that has not been verified from the Information Regulator's confirmation.
2. Information Regulator's PAIA guide
The Information Regulator publishes the guide contemplated by section 10 of PAIA. It explains PAIA rights, the bodies from which records may be requested, available remedies, prescribed forms and applicable fees. The current guide and forms are available from the Information Regulator's PAIA page.
Information Regulator (South Africa): Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191; telephone 010 023 5200 or 0800 017 160; email enquiries@inforegulator.org.za.
3. Records available without a formal PAIA request
Subject to authentication, security, confidentiality and any applicable fee, the following may be available without a formal Form 2 request:
- the SAYDO Service Terms, Privacy Notice, Payments Policy, Retention Policy, Business Account Terms, Voice and Third-Party Content Notice and this manual;
- public website, product, support and contact information;
- plan and pricing information currently offered to the public;
- a customer's own dashboard information and supported customer export, memory and deletion controls; and
- corporate information available from CIPC or another lawful public register.
Dashboard access is limited to the authenticated account and its authorised linked records. An administrator's ability to view information for authorised support or operations does not make those records publicly or automatically available.
4. Records held under other legislation
Amax Digital may hold records required by legislation that applies to it from time to time, including, where applicable, the Companies Act, Income Tax Act, Value-Added Tax Act, Electronic Communications and Transactions Act, Consumer Protection Act, POPIA, PAIA, Basic Conditions of Employment Act, Labour Relations Act, Employment Equity Act, Unemployment Insurance legislation, Compensation for Occupational Injuries and Diseases Act and intellectual-property legislation. Access remains subject to PAIA, the relevant legislation and lawful grounds for refusal.
5. Main categories of records
| Category | Examples that may be held |
|---|---|
| Corporate and governance | Formation and registration records, registers, resolutions, policies, delegations, insurance and statutory filings. |
| Finance, tax and payments | Accounting records, budgets, invoices, payment orders, PayFast transaction and notification evidence, refunds, recurring-payment status, credit ledgers, banking references and tax records. |
| People and contractors | Recruitment, employment, contractor, payroll, training, performance, health-and-safety and access records, where applicable. |
| Customers and prospective customers | Account, identity, contact, consent, number-linking, subscription, usage, support, complaint, access, correction, objection and deletion records. |
| SAYDO service content | Encrypted messages, voice transcripts, AI responses, attachment questions and answers, quoted references, memory/search records and account exports, where retained and not deleted. |
| Technology and security | Source and configuration records, system architecture, encrypted credentials, logs, audit events, access records, vulnerability and incident records, backups, disaster-recovery and service-continuity records. |
| Suppliers and operators | Contracts, due diligence, service levels, support records, security terms and data-processing arrangements for hosting, Meta/WhatsApp, OpenAI, PayFast, email and professional services. |
| Intellectual property and marketing | Trade marks, domains, copyright, licences, product designs, research, analytics, campaigns and public communications. |
| Legal and compliance | Policies, legal advice, disputes, regulatory correspondence, PAIA/POPIA records, processing and transfer assessments and law-enforcement requests. |
6. Personal-information processing
Amax Digital processes personal information about customers, prospective customers, Business account users, representatives, people identified in customer-submitted content, staff, contractors, suppliers, website visitors and support correspondents. Purposes include account administration, number verification, WhatsApp delivery, transcription and AI tasks, memory/search, billing, support, security, fraud prevention, records management and legal compliance.
Information may be provided to Meta/WhatsApp, OpenAI, PayFast, hosting/database and email service providers, professional advisers, regulators, courts or authorities where authorised. International processing is limited to a lawful basis under POPIA section 72 or another applicable law. The categories, purposes, retention, safeguards, rights and contact route are described more fully in the Privacy Notice and Data Retention and Deletion Policy.
7. How to make a PAIA request
- Download and complete the Information Regulator's prescribed Form 2: Request for Access to Record.
- Describe the requested record precisely enough for it to be identified. State the right you seek to exercise or protect, why the record is required for that purpose, the preferred form of access and how you want to receive the decision.
- Provide reasonable proof of identity. A representative must also provide proof of authority. Do not send passwords, one-time codes, full payment-card details or unnecessary identity documents by ordinary email; ask for a secure verification method if sensitive proof is required.
- Email the completed form to info@saydo.co.za with the subject “PAIA request”, or deliver it to the physical address in section 1.
- Pay only a request, search, preparation, reproduction or access fee lawfully prescribed and requested in a written notice. A requester qualifying as a personal requester may be treated differently under the prescribed fee rules.
A request that is too broad or unclear may be delayed while reasonable assistance or clarification is sought. PAIA does not require a requester to disclose more personal information than is reasonably needed to identify the requester, verify authority, locate the record and decide the request.
8. Decision period, fees and access
The Information Officer will ordinarily notify the requester of the decision within 30 days after receiving the request, unless PAIA permits an extension or another lawful adjustment. A lawful extension may be for no more than the additional period allowed by PAIA and will be communicated with the reason. If access is granted, the notice will describe any prescribed access fee and the form in which access will be provided. Access may be deferred until a required fee is paid.
Where a record cannot be found or does not exist, SAYDO will provide the notification required by PAIA after reasonable steps to locate it. Where only part of a record is protected, reasonably severable information may be disclosed.
9. Grounds for refusal
Amax Digital must or may refuse access where PAIA requires or permits it. Grounds can include protection of another person's privacy; confidential commercial, financial, technical or trade-secret information; confidential information supplied by a third party; safety and security; privileged legal material; law-enforcement or regulatory processes; research information; and information whose disclosure would breach a duty of confidence or cause the harm recognised by PAIA. These examples do not replace PAIA's complete grounds or its public-interest override.
A decision will not be made merely because a record is inconvenient or critical of SAYDO. Each request will be assessed against PAIA, the rights of third parties and any duty to consult or notify an affected third party.
10. Complaints and court remedies
There is no internal PAIA appeal against the decision of a private body. A requester or affected third party may use the Information Regulator's prescribed Form 5: Complaint Regarding Request for Access to Record and complaint process, or approach a competent court within the time and on the conditions provided by PAIA. Regulator complaints may be sent to PAIAComplaints@inforegulator.org.za or submitted through the Information Regulator complaints portal.
11. Availability, accessibility and updates
This manual is available without charge on the SAYDO website and by request from info@saydo.co.za. It may be inspected at the address in section 1 by prior arrangement. Contact SAYDO for a reasonably accessible copy or assistance with the request process.
The manual will be reviewed when the business, record categories, contact details or applicable law materially change. A new publication date or version does not alter a PAIA request already validly submitted.
This engineering-prepared manual is published for use and independent South African legal/privacy review. Publication does not claim an unverified Information Officer registration reference, Information Regulator approval, or that every listed record exists or is disclosable.