Privacy Policy

Sixty is an app that estate agents use to answer property enquiries within 60 seconds, follow up, and book viewings. In this policy, "Sixty", "we" and "us" mean the people who run the app at officialsixty.com.

This policy covers two groups of people: agents who use Sixty, and people who contact an agent about a property (buyers, sellers and tenants, called "leads" in the app). It is written to meet South Africa's Protection of Personal Information Act (POPIA) and applies wherever Sixty is used.

Our Information Officer can be reached at support@officialsixty.com.

Agents' own account details: Sixty decides how these are used, so we are the "responsible party" under POPIA (the "controller" in other countries).

Information about people who contact an agent: this belongs to the agent (or their agency). The agent is the responsible party, and Sixty handles the information on their behalf as their "operator", only to do what the agent uses Sixty for.

From agents

• Name, email address, mobile number, agency name and Fidelity Fund Certificate (FFC) or licence number.
• Your password, stored only in scrambled (hashed) form. We can't see it.
• Country, time zone, quiet hours, follow-up timing, and the tone and sign-off you choose for replies.
• Listings you add, including details read from a listing link you paste.
• Contacts you import (such as names, numbers, email addresses, birthdays and purchase dates) for check-in reminders.
• Your viewing availability, booked viewings, and the devices you turn notifications on for.

From accounts an agent connects

• Gmail, Google Workspace or Outlook: your email address and a secure access key from Google or Microsoft. See section 4 for exactly what Sixty does with your mailbox.
• Google or Outlook calendar: your busy and free times (not what your events are about), plus the viewing events Sixty adds.
• WhatsApp Business: your WhatsApp business number and account IDs, and an access key, which we store encrypted.

From people who contact an agent

• Name, email address and mobile number.
• The property you asked about, your message, and where your enquiry came from (for example Property24 or a sign-in form).
• Messages sent and received through Sixty, viewing bookings, and whether you've asked to stop receiving messages.

When anyone uses the site

• Basic technical records (such as IP address, browser and device type, and error logs) to keep Sixty secure and fix problems.
• Your approximate country, worked out from your connection, to show local prices and wording.
• A sign-in cookie to keep you logged in, and a few settings saved in your browser (such as your country choice).
• Google Ads measurement: on our public pages (home, pricing, partners, sign-up and log-in) we use the Google tag so we can tell whether our Google ads lead to agents signing up. Google may set a cookie that records which ad you clicked. We send Google only the fact that a new account was created, never your name, email, number or any lead data. The Google tag doesn't run inside the agent app or on pages that leads open. If you arrive from one of our Google or Instagram ads, your browser also keeps a note of which channel it was (only the channel name, for 30 days) so we can see which ads bring agents who sign up. Visitors in the UK and Europe are asked first, and neither runs unless they tap "Accept". You can limit ad personalisation at adssettings.google.com or block these cookies in your browser.

When an agent connects their mailbox, Sixty uses it for two things only:

• Sending the replies, follow-ups and seller reports Sixty writes for you, from your own address, so leads see your name.
• Checking whether a lead has emailed you back, so follow-ups stop. Sixty asks your mailbox only whether such a message exists. It does not open, read, copy or store the content of your emails.

The only mailbox data Sixty keeps is the ID of the email conversation with each lead, so replies stay in one thread. When you connect your calendar, Sixty reads only your busy times and creates events for viewings that leads book.

We do not use data from your Google or Microsoft account to train AI models, for advertising, or for anything other than the features above, and we never sell it.

You can disconnect your mailbox or calendar at any time in Sixty's Settings, or remove Sixty's access from your Google or Microsoft account settings.

• To reply to enquiries and follow up on the agent's behalf, within their quiet hours and the legal times for marketing messages.
• To write messages in the agent's voice and spot leads who want a viewing or have a real question.
• To let leads book viewings, add them to the agent's calendar, and send reminders.
• To alert agents by notification or email, and to prepare seller reports and check-in reminders.
• To run, secure, support and improve Sixty, and to meet our legal obligations.

Sixty only messages people automatically when they contacted the agent first. It never messages an agent's imported contacts on its own; the agent sends those messages themselves. Every message includes a way to opt out, and opting out is honoured straight away.

We rely on these lawful grounds under POPIA: the agreement with the agent, the agent's legitimate interest in answering someone who asked to be contacted, consent (for example on a sign-in form), and legal requirements.

Sixty uses AI services to draft replies and follow-ups, read the details out of a forwarded lead email, recognise what a lead's reply means, and fill in a listing from a link. Only what's needed for that task is sent, such as the lead's message, the listing details and the agent's tone settings.

The content of an agent's Gmail or Outlook mailbox is never sent to AI. Agents can see every message Sixty sends in the app and are responsible for checking them.

We don't sell personal information. We share it only with service providers that help run Sixty, and only what they need:

• Our cloud platform provider: hosting, database, email delivery, notifications and AI services. Ask us at support@officialsixty.com if you'd like the provider's details.
• Google and Microsoft: when an agent connects their mailbox or calendar.
• Meta (WhatsApp): when an agent connects their WhatsApp Business number.
• Twilio: for text messages, where that's switched on.
• Yoco: our payment provider, which processes card payments for Sixty plans. Yoco handles your card details on its own secure payment page; we never see or store full card numbers, only the payment amount, date and reference.

We may also share information if the law requires it, or to protect people's safety or Sixty's legal rights.

Some of our providers store or process information outside South Africa, for example in the United States or the European Union. We only use providers that are bound by laws, contracts or rules that protect personal information to a standard similar to POPIA, as section 72 of POPIA requires.

All connections to Sixty are encrypted. Passwords are hashed, WhatsApp access keys are encrypted, and access to the database is limited to what running the service requires. Each agent can only see their own leads.

No system is perfectly secure. If a breach puts your personal information at risk, we'll tell the Information Regulator and the people affected as soon as reasonably possible, as POPIA requires.

• Agent accounts and everything in them are kept while the account is open.
• To close your account, use Settings → Delete my account (or email support@officialsixty.com). Your account and its leads, listings, contacts and documents are deleted straight away, except payment records, which tax law requires us to keep for 5 years. Export your leads first from Settings if you want a copy. How account deletion works.
• Opt-out records (the fact that someone asked not to be messaged) are kept so the request keeps being honoured.
• Technical logs are kept for a short time, then deleted.

You have the right to:

• ask what personal information we hold about you, and get a copy;
• ask us to correct or delete it;
• object to it being used, including for direct marketing;
• withdraw your consent at any time;
• complain to the Information Regulator.

To stop messages from an agent: reply STOP to any text or WhatsApp message, or use the unsubscribe link in any email. For anything else, email support@officialsixty.com. We'll respond within 30 days.

Agents can delete their account themselves in Settings → Delete my account. How account deletion works.

Information Regulator (South Africa): inforegulator.org.za, enquiries@inforegulator.org.za. If you live elsewhere, for example in the UK or EU, you have similar rights under your local law and can complain to your local data protection authority.

Sixty is for adults. It isn't meant for anyone under 18, and we don't knowingly collect children's information.

If we change this policy, we'll update the date at the top. If a change is important, we'll email agents before it takes effect. Our Terms of Service explain the rules for using Sixty.