Privacy Policy

[LEGAL COMPANY NAME] at [COMPANY ADDRESS] is responsible for personal information about the people who use Kijani. For data protection questions contact [DATA PROTECTION CONTACT].

For information about your own customers and prospects that you put into, or find with, Kijani, you decide what is collected and why; we process it on your behalf. [CONTROLLER / PROCESSOR ROLES AND ANY DATA PROCESSING AGREEMENT TO BE CONFIRMED].

Account information:

• Company name, email address and phone number given at sign-up.
• Your password, stored only as a one-way hash.
• Team members you invite, their roles and access.
• Which version of the Terms and Privacy Policy you agreed to, and when.

Product information:

• Your business profile: what you sell, who buys it, country and language.
• Goals, prompts and chats with the assistant, plans, campaigns, routines and their settings, and your AI controls.
• Content created in the app: messages, posts, videos, images, captions, research and documents you upload.

Information about businesses and contacts:

• Business details found in public listings and on public websites and pages: names, addresses, phone numbers, email addresses, websites and what the business does. Where a website states who someone is and their role, that name may be recorded.
• Contacts you add or import yourself.

Communication information (when you connect these accounts):

• Email: messages sent and received through your connected Gmail account, and their replies.
• WhatsApp: messages sent and received through the number you link.
• Facebook and Instagram: comments and messages on the pages you connect, and page statistics for reports.
• Posting results on the networks you connect (Facebook, Instagram, TikTok, YouTube, Telegram).

Technical information:

• IP address and browser details recorded with sign-ins and with changes to security and AI settings.
• Usage of AI features (which feature, how much) to run plans and show your usage.
• Error and performance logs.

• To provide the Service: find and research businesses, write and send messages, answer conversations, make and publish content as you instruct.
• To keep accounts secure and prevent abuse, including rate limits and suspending misuse.
• To show your usage and, where paid plans apply, to manage payments.
• To support you when you contact us.
• To meet legal obligations.

[LEGAL BASES FOR PROCESSING TO BE CONFIRMED UNDER THE APPLICABLE LAW]. We do not sell personal information. We do not use your workspace data to show advertising.

To write, research, answer and create, the relevant text (for example your instructions, a business’s public details or a customer’s message) is sent to AI model providers that process it to produce a response. Images, audio and documents may be sent to AI providers when you use features that read them.

[LIST OF AI PROVIDERS IN USE, THEIR LOCATIONS AND DATA-USE TERMS TO BE CONFIRMED — at the time of writing the main text model is provided by DeepSeek, with Groq used for some vision, audio and fallback tasks].

Service providers that help us run Kijani, only as needed for the Service:

• Hosting and network providers [HOSTING AND NETWORK PROVIDERS TO BE CONFIRMED].
• AI model providers (see above).
• The services you connect — Google (Gmail), WhatsApp, Meta (Facebook, Instagram), TikTok, YouTube, Telegram — when you ask Kijani to send, read or publish through them.
• Search, map and stock media providers used to find businesses and pictures. [LIST TO BE CONFIRMED].
• An email delivery provider for account emails such as password resets [PROVIDER TO BE CONFIRMED].

We may also disclose information when required by law, or to protect people and the Service. [INTERNATIONAL TRANSFER SAFEGUARDS TO BE CONFIRMED].

Workspace data is kept while the workspace exists. When the owner deletes the workspace, its records and stored files are deleted straight away.

Database backups are kept for a limited number of days and then removed on a rolling basis, so deleted data can remain in a backup until that backup expires. A security record that the workspace was deleted, naming it, is kept.

[SPECIFIC RETENTION PERIODS FOR EACH CATEGORY TO BE CONFIRMED].

We protect the Service with access controls that keep each workspace’s data separate, passwords stored as one-way hashes, optional two-step sign-in, sign-in attempt limits, and encrypted storage for the login tokens of connected services, two-step sign-in secrets and API keys. Connections to the app use HTTPS. No system is perfectly secure.

Depending on where you are, you may have rights to access, correct, export, delete or object to the use of your personal information. In the app you can edit your profile and business details, export your leads as CSV, disconnect connected accounts, and the workspace owner can delete the whole workspace. For anything else contact [DATA PROTECTION CONTACT]. [RIGHTS AND COMPLAINT AUTHORITY UNDER THE APPLICABLE LAW TO BE CONFIRMED].

If you are a business or person who received a message sent with Kijani, you can reply “STOP” or unsubscribe to stop further messages from that sender, or contact the sender directly.

When this policy changes in a way that requires your agreement, we will ask you to agree to the new version the next time you open the app.