DaftariAI

Privacy Policy

Last updated: March 3, 2026

1. Introduction

Daftari ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our business management application and WhatsApp integration service.

Daftari is operated from Nairobi, Kenya. By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Phone number, email address, and business name when you register
  • Customer Data: Names and phone numbers of your customers that you add to the system
  • Transaction Data: Payment records, M-Pesa transaction codes, amounts, and descriptions
  • Job/Service Data: Descriptions of jobs or services, quotes, and status
  • WhatsApp Messages: Messages you send to our WhatsApp business number for processing

2.2 Information Collected Automatically

  • Usage Data: How you interact with our application
  • Device Information: Browser type, device type, and operating system
  • Log Data: Access times, pages viewed, and referring URLs

3. How We Use Your Information

We use the collected information to:

  • Provide and maintain our service
  • Process your transactions and manage customer records
  • Parse and understand your WhatsApp messages using AI to create jobs, record payments, and generate reports
  • Send you service-related notifications via WhatsApp
  • Authenticate your identity and secure your account
  • Improve our services and develop new features
  • Respond to your inquiries and provide customer support

4. AI Processing

We use artificial intelligence services (OpenAI/Google Gemini) to process your WhatsApp messages and convert natural language into structured data. This helps us understand your intent when you send messages like "Job Jane 1000 Print business cards" or forward M-Pesa confirmation messages.

Your message content is sent to these AI services for processing. We do not use your data to train AI models. The AI providers process data according to their respective privacy policies.

5. Data Sharing and Disclosure

We may share your information with:

  • Service Providers: Third-party companies that help us operate our service:
    • Supabase (database, authentication, and backend services)
    • Vercel (application hosting)
    • Meta/WhatsApp (messaging platform)
    • OpenAI/Google (AI processing for message parsing)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure authentication mechanisms
  • Row-level security in our database
  • Regular security assessments

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we perform a soft delete, retaining anonymized data for legal and analytical purposes while removing personally identifiable information.

8. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate data
  • Deletion: Request deletion of your account and data
  • Portability: Request your data in a portable format
  • Objection: Object to certain processing of your data

To exercise these rights, contact us at legal@daftariai.com or use the account deletion feature in your profile settings.

9. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

10. International Data Transfers

Your data may be transferred to and processed in countries other than Kenya, including the United States where our service providers operate. We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at: