Privacy Policy.

1Who this applies to

We serve businesses (our customers) that connect a WhatsApp Business number and invite team members into a workspace. Those businesses typically act as the controller for their customer and lead data. Biashara Chats processes that data on their behalf to provide the product. This policy also covers personal data of workspace users (owners, admins, agents) and visitors to our marketing site.

2Information we collect

Depending on how you use the service, we may process:

• Account & workspace data — name, email, organization name, roles, invites, billing contact details, and authentication signals (for example email OTP or Google sign-in).
• WhatsApp Business data — messages, media metadata, delivery/read status, phone numbers, profile names, and related webhook events received through Meta's official Cloud API for numbers you connect.
• CRM & operations data — leads, notes, tags, appointments, follow-ups, handovers, Store catalogue and orders, broadcasts, and templates you configure.
• AI feature data — conversation snippets, FAQs, policies, business description, catalogue excerpts, and model outputs used for triage, suggested replies, and optional auto-reply when you enable those features.
• Usage & device data — approximate logs needed for security, debugging, and product analytics (for example IP address, browser type, and feature usage events).
• Payment data — subscription and payment status handled via our payment processor (for example Paystack). We do not store full card numbers on our servers.

3How we use information

• Provide, secure, and improve the Biashara Chats workspace.
• Deliver shared inbox, CRM, Store, broadcasts, integrations, and team collaboration features.
• Run AI features you enable (for example drafting or auto-reply) using your configured knowledge and relevant conversation context — not to train public foundation models on your private chats for unrelated purposes.
• Process billing, send service notices, and provide support.
• Enforce acceptable use, investigate abuse, and meet legal obligations.
• Analyze aggregated or de-identified trends to improve the product.

4WhatsApp, Meta, and your customers

Messaging runs on Meta's WhatsApp Business Platform. Meta processes message data according to its own terms and privacy disclosures. You remain responsible for obtaining any consents or legal bases required to message your contacts, and for complying with WhatsApp Business and Commerce policies. End customers who message your business number should be directed to your privacy notice for how your business uses their chats; they may also contact us for platform-level deletion requests as described in our Data Deletion Policy.

5Sharing & processors

We do not sell personal data. We share information only as needed to operate the service, including with:

• Meta / WhatsApp (message delivery and account linking).
• Cloud infrastructure and database providers that host the application.
• AI model providers used to generate triage or replies when those features are enabled (prompts include only the context needed for the request).
• Payment processors for subscriptions and invoices.
• Email / push notification providers for product and security messages.
• Professional advisers or authorities when required by law or to protect rights and safety.

Workspace data is logically isolated by organization. Access for your team is invite-only and role-based.

6Security & retention

We use industry-standard safeguards such as encrypted connections (HTTPS/TLS), access controls, and operational monitoring. No method of transmission or storage is perfectly secure. We retain workspace data while your account is active and as needed to provide the service, resolve disputes, and meet legal or accounting requirements. After deletion requests, production data is removed according to our Data Deletion Policy; encrypted backups may persist for a limited period before purge.

7International transfers

We may process and store data in Kenya and in other countries where our infrastructure or subprocessors operate. Where we transfer personal data internationally, we take steps appropriate to the context (for example contractual protections with providers) so that the data remains protected to a standard consistent with this policy and applicable law.

8Cookies & similar technologies

We use cookies and similar technologies that are necessary for authentication, session security, and remembering preferences. We may also use limited analytics cookies or similar tools to understand product usage. You can control cookies through your browser settings; disabling some cookies may affect sign-in or core features.

9Your rights

Subject to applicable law (including Kenya's Data Protection Act, 2019), you may request access to, correction of, or deletion of personal data we hold about you; object to or restrict certain processing; and withdraw consent where processing is based on consent. Workspace owners can manage most business data in-app. Individual users can update profile details in settings. To exercise rights or raise a privacy complaint, contact us using the details below. We may need to verify your identity before acting on a request.

10Children

Biashara Chats is a business product. It is not directed to children under 18, and we do not knowingly collect personal data from children for the purpose of offering the service to them.

11Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Material changes may also be communicated in-product or by email where appropriate.

Privacy questions

Contact our privacy team

Byte Nuru — Nairobi, Kenya. For privacy-related inquiries or to exercise your rights, email our data protection contact.