Privacy policy

1. Who we are

The data controller for Enjin AI is Advanced Intelligent Enhancement Technology Ltd (“AIEvens”, “we”, “us”), of 33 Bosoro Street, Lagos, Nigeria. Enjin AI is the software we provide. Our company website is https://www.aievens.com.ng.

Privacy contact: support@aievens.com.ng, telephone +234 808 640 0542.

We handle personal data under the Nigeria Data Protection Act 2023. If you are a business customer, you decide what knowledge your assistant may use and you are responsible for the personal data of your own customers that you send through Enjin AI.

2. Who this policy covers

• People who create or administer an Enjin AI account for a business.
• Staff of that business who sign in to the portal.
• People who message a connected WhatsApp Business number, website assistant, or API, and whose messages are answered or stored by Enjin AI.
• People who write to us through the contact form on this website.
• Facebook users who sign in with Meta in order to connect a WhatsApp Business account.

3. Account and business data

When a business opens an account, we collect:

• Name, email address, and a password that we store only as a hash.
• Role (such as owner, admin, or editor) and whether multi-factor authentication is on.
• A multi-factor authentication secret, stored encrypted, when the person turns that feature on.
• Business profile: business name, description, industry, website, support email, support phone, address, timezone, and opening hours.
• Plan, usage counts, and payment references from the payment provider the business uses.
• Sign-in times and an audit record of sensitive actions inside the account.

4. Knowledge the business publishes

Businesses upload or compose documents (for example PDF, Word, Markdown, or plain text) that the assistant is allowed to use. Those files can contain personal data if the business puts it there. We store the file, a text version used for search, and embeddings so the assistant can find the relevant passage. A file marked internal is not used for public customer replies. Unpublishing a file removes it from later replies.

5. WhatsApp, Facebook Login, and Meta

Enjin AI connects to WhatsApp through Meta’s WhatsApp Business Platform (Cloud API) and Facebook Login for Business. We use the permissions whatsapp_business_management, whatsapp_business_messaging, and public_profile.

When a business connects WhatsApp, we receive and store:

• The Facebook user’s public profile information needed to complete the login.
• The WhatsApp Business account identifier, phone number identifier, and the display phone number the business confirms.
• An access token for that WhatsApp account. We encrypt the token before it is stored.
• Message templates the business creates or submits for Meta’s approval.

The number stays on the WhatsApp Business app. Enjin AI is added beside that app. If the business chooses to share chat history, Meta can send us about the last six months of one-to-one messages and the contact names stored in that app. Group chats are not imported. Messages the business later types in the WhatsApp Business app are mirrored into Enjin AI so the thread stays in one place.

Customer WhatsApp messages include the sender’s phone number, profile name when Meta provides it, message text, and the time of the message. We use that content to show the conversation to the business and, unless a person has taken over the thread, to draft a reply from the business’s approved knowledge.

Meta is the messaging platform. Messages sent or received on WhatsApp are also processed by Meta under Meta’s own terms and privacy policy. We do not ask for access to a person’s Facebook friends, posts, or private social content.

If a business’s plan includes Instagram Inbox and they connect Instagram, we receive Instagram professional DMs for that account, including the Instagram-scoped sender id, message text, and the time of the message. Replies typed in the Instagram app can be mirrored into Enjin AI so the thread stays in one place. The Instagram handle stays on Instagram; Enjin AI is added beside it.

If a business’s plan includes Facebook Publishing or Instagram Publishing and they connect a Page, we store the caption, public media URLs they submit, and Meta’s post identifiers after publish. We use a Page access token (encrypted at rest) only to publish that content and to keep the connection.

6. Website assistant, API, and contact form

If a business installs the website assistant, we store the messages a visitor sends and the replies we return. If a business uses an API key, we store the request content needed to answer and to enforce the key’s scope. The public contact form on this website stores the name, email, and message the person submits so we can reply.

7. Why we use personal data

• To create and secure the business account, including multi-factor authentication.
• To connect, operate, and disconnect the business’s WhatsApp number.
• To receive customer messages and send replies the business has enabled.
• To copy recent one-to-one WhatsApp history when the business agrees to share it.
• To show conversations, templates, usage, and audit history inside the portal.
• To take payment for a paid plan and to keep accounting records.
• To detect abuse, protect the service, and meet legal duties.
• To answer a privacy or deletion request.

We do not sell personal data. We do not use customer WhatsApp chats to advertise to those customers, and we do not use a business’s private knowledge to train a public model for other customers.

8. AI providers

A reply is produced by an AI model provider configured for that business. To produce the reply, we send the customer’s question, recent messages in that conversation, and the relevant passages from knowledge the business has published. The provider returns the answer. We do not send the business’s WhatsApp access token to the model provider.

9. Who else receives data

• Meta Platforms, to deliver WhatsApp messages, templates, and the connection flow.
• Cloud hosting, database, file storage, and search providers that run Enjin AI. They process data only so we can provide the service.
• The AI model provider selected for the business, as described above.
• Payment providers (such as Paystack, Flutterwave, or Stripe) when the business pays for a plan. They receive the billing details needed to take payment.
• The business customer that owns the account. Its staff can read the conversations, files, and settings for that business, according to their role.
• Authorities when Nigerian law, a court, or a regulator requires it.

Staff of one business cannot read another business’s knowledge, messages, or tokens. Access inside Enjin AI is separated per business.

10. Security

The portal and API are served over HTTPS. WhatsApp tokens, API secrets, and multi-factor secrets are encrypted before storage. Staff sign in with a password and multi-factor authentication. Roles limit who can change WhatsApp, billing, and team settings. Sensitive actions are written to an audit log. No method of transmission or storage is perfectly secure; we work to prevent unauthorised access, loss, and misuse.

11. How long we keep data

• Conversation messages are kept for the retention period set on the business account. The default is 365 days. The business can set a different period. After that period, messages and inactive conversations are deleted.
• WhatsApp history imported from the Business app is kept under that same conversation retention period.
• Disconnecting WhatsApp deletes the stored access token and phone link from Enjin AI. Messages already stored remain until the retention period ends or the account is deleted.
• Audit records are kept for up to seven years, then deleted.
• Closed website enquiries are deleted after two years.
• Payment records may be kept longer where tax or accounting law requires it.

12. How to ask for access, correction, or deletion

You can ask us what personal data we hold, ask for a correction, or ask us to delete it. Email support@aievens.com.ng with the subject “Enjin AI data request”. The steps, what we delete, and how long it takes are on the data deletion page.

If you messaged a business on WhatsApp, that business decides how those chats are used. Contact the business first. You may also email us and we will help to the extent the data is in Enjin AI.

You may complain to the Nigeria Data Protection Commission if you believe your data has been mishandled. We ask that you contact us first so we can resolve it.

13. Children

Enjin AI is a business tool. We do not knowingly create accounts for anyone under 18. If you believe a child has given us personal data, email support@aievens.com.ng and we will delete it.

14. Where data is processed

We are established in Lagos, Nigeria. Our infrastructure and some providers (including Meta and AI model providers) may process data in other countries. We use providers that contract to protect the data and we transfer it only as needed to run Enjin AI.

15. Changes

We will post any change on this page and update the effective date. If a change materially affects a business account, we will also notify the account owner by email or in the portal.

16. Contact

Advanced Intelligent Enhancement Technology Ltd (AIEvens)
33 Bosoro Street, Lagos, Nigeria
support@aievens.com.ng
+234 808 640 0542
https://www.aievens.com.ng