Privacy Policy

Last updated: October 8, 2026

Scope. This Privacy Policy covers Ojunai Inventory, which is owned by Ojunai Technologies Inc. OJUNAI AI LTD (RC 9585647) is Ojunai Technologies Inc.’s Nigerian subsidiary and operates and supports Ojunai Inventory for businesses in Africa. Ojunai Technologies Inc. operates and supports Ojunai Inventory in other markets. Additional Ojunai Technologies products may publish product-specific privacy terms as they launch. References below to “Ojunai”, “we”, and “us” refer to the Ojunai entity responsible for the product and market you are using. The FlashAppt-specific provisions below apply only to FlashAppt users. Ojunai Technologies Inc. (Ontario, Canada) is the controller responsible for personal information processed through Ojunai Inventory, including its WhatsApp, Telegram, and Messenger channels.

This policy explains what information Ojunai processes, why we process it, when service providers receive it, and the choices available to you. We do not sell personal or business information and do not use it for third-party advertising.

FlashAppt Privacy

FlashAppt processes the information needed to provide marketplace discovery, bookings, favourites, appointment watches, repeat booking, merchant recovery tools, and performance views.

Private calendar scans

A merchant may choose to scan a private .ics calendar file to detect potential appointment openings. This is a private calendar scan, not automatic calendar synchronization. Google and Outlook accounts do not connect automatically at this time.

Calendar events are never published automatically
The merchant must review the service, price, staff member, and time before publishing
Calendar titles, attendees, notes, locations, and raw identifiers are not uploaded

Consumer preferences and retention features

When a consumer uses favourites or appointment watches, FlashAppt stores the preferences they choose—such as business, service, category, price, day, and time—to provide relevant discovery and alerts. Alerts improve discovery but do not reserve or guarantee an appointment.

Direct rebooking becomes available after a completed, checked-in FlashAppt visit.

Merchant recovery analytics

Merchants may see a 30-day view of fill rate, recovered revenue, new customers, repeat customers, favourites, and appointment-watch demand associated with their FlashAppt activity.

For FlashAppt privacy questions or data requests, contact privacy@flashappt.com.

1. Information Ojunai Inventory Processes

Depending on the features and channels you use, Ojunai Inventory may process:

Account and business information: Your name, phone number, email address, business name, business type, location, staff role, and account settings
Business records: Inventory, products, sales, purchases, expenses, contacts, debts, payments, reports, reservations, and other records you create or ask Ojunai to manage
Messaging content: Messages, replies, supported attachments, commands, and recent conversation history exchanged directly with Ojunai through an enabled channel
Channel identifiers: Information needed to receive, attribute, and reply to messages, such as a WhatsApp phone number or Meta channel identifier, a Messenger Page-scoped user identifier, a Telegram chat identifier, provider message identifiers, delivery information, and timestamps
Account links: Records that connect a channel identity to the correct Ojunai user, staff member, business, role, and location after signup or an authorized linking flow
Usage and technical data: Features used, security and audit events, IP address, browser or device details, and diagnostic information needed to operate and protect the service

2. WhatsApp, Telegram, and Messenger Processing

Ojunai’s main merchant WhatsApp integration uses the Meta WhatsApp Cloud API for message delivery. When you message Ojunai’s WhatsApp account, Meta routes the message and related delivery data to Ojunai. We use the content and relevant channel identifiers to identify the authorized Ojunai account, maintain conversation context, interpret the request, carry out permitted actions, and return a response.

When you link your Ojunai account to Ojunai’s Telegram bot, Telegram routes messages you send to the bot in a private one-to-one chat, together with your Telegram chat identifier and message identifiers, to Ojunai. We use them for the same account-linking and business-assistant purposes. Group chats are not supported.

Messenger

Ojunai offers a Messenger integration through Ojunai’s own Facebook Page. Availability to the public depends on Meta’s review of the integration. Meta routes messages sent directly to that Ojunai Page, together with relevant Page-scoped identifiers and event information, to Ojunai for the same account-linking and business-assistant purposes.

What this does not mean.

Ojunai does not receive or read unrelated private WhatsApp or Facebook conversations. The current Messenger design does not connect to, administer, post for, or manage a customer’s Facebook Page. It uses a single Page owned and controlled by Ojunai.

Messaging content and account context may be used to record or retrieve inventory, sales, expenses, debts, payments, reports, and other business-management information requested by an authorized user. Recent conversation history may be stored so Ojunai can understand follow-up messages such as corrections, confirmations, or references to an earlier request.

3. How We Use Information

Provide requested features: Authenticate users, connect channels, process business requests, update records, generate reports, send permitted alerts, and display the dashboard
Interpret messages: Send a message and relevant business context to an AI provider to determine intent, extract structured details, and generate or support a response
Protect high-impact actions: Apply permissions, confirmation requirements, audit logging, deduplication, and security checks before eligible actions are executed
Operate the service: Diagnose failures, prevent abuse, maintain reliability, support users, and measure aggregate product performance
Billing and administration: Manage plans, payment status, receipts, and required account communications

AI output does not bypass Ojunai’s application permissions or confirmation controls. Ojunai’s backend decides whether and how a requested action is executed.

4. AI Processing

Ojunai currently uses Anthropic’s Claude API to interpret natural-language requests. Relevant message content, recent conversation context, and the minimum business context needed to answer or structure the request may be sent to Anthropic. This can include product names, quantities, transaction details, contact names supplied in a request, and account-specific instructions.

Ojunai sends relevant messages and business context to Anthropic for processing. Retention is governed by our applicable provider agreement and settings.

5. Service Providers and Disclosures

Information may be disclosed to providers only as reasonably necessary for their role, subject to applicable agreements and settings:

Meta: Routes messages and associated identifiers for the WhatsApp Cloud API and for Messenger through Ojunai’s Facebook Page. See Meta’s Privacy Policy
Anthropic: Processes relevant messages and business context through the Claude API. See Anthropic’s Privacy Policy
Telegram: Routes messages and identifiers when you link and use Ojunai’s Telegram bot. See Telegram’s Privacy Policy
Paystack, Flutterwave, and Stripe: Process subscription or other payments according to market and currency. Ojunai receives payment status, references, and related account information rather than full card or mobile-money credentials
Hosting and operations: Our servers and databases are hosted by Hetzner in Germany. Encrypted database backups are kept with Hetzner and in Cloudflare R2 storage. Uptime monitoring services (Better Stack and UptimeRobot) check that the service is reachable; they do not receive your business records. Verification and account emails are sent through Resend.
Website providers: this website is hosted by Netlify, which receives visitors’ IP addresses. When you submit the demo-request form, Web3Forms receives the details you enter and emails them to us (see Web3Forms’ Privacy Policy). Fonts are loaded from Google Fonts, which receives visitors’ IP addresses (see Google Fonts privacy). The demo-request page uses hCaptcha, through Web3Forms, to block automated abuse (see hCaptcha’s Privacy Policy). Cloudflare Web Analytics measures website visits

We may also disclose information when required by law, to protect users or the service, or as part of a properly governed corporate transaction.

6. Payment Information

Payment providers collect and process payment credentials on their systems. Ojunai does not intentionally store full payment-card numbers, bank-account credentials, or mobile-money PINs. We may retain subscription status, payment references, amounts, currency, invoices, and related records needed for billing, accounting, fraud prevention, and support.

7. Retention and Deletion

While your account is active, we keep the records you create so the service works. Some operational records are removed automatically on these default schedules:

Message logs: deleted after 180 days
Encrypted inbound messages: message content is erased 30 days after it has been processed; a content-free record that stops a message being processed twice is kept
Activity (audit) records: deleted after 365 days
One-time codes and linking or verification links: deleted shortly after they expire

Permanently deleting your account

You can ask us to permanently delete your Ojunai account and all of its business data at any time:

In the dashboard: the business owner can go to Settings → Delete account and confirm with their password.
By email: if you cannot sign in, email contact@ojunai.com from the email address on the account, or include the account’s phone number. We will verify that you own or are authorized to act for the account before scheduling deletion.

Deletion is scheduled 14 days after the request so that a mistaken or unauthorized request can be cancelled. Until then the account keeps working, and the owner or an admin can cancel it in Settings. After that, deletion runs automatically and cannot be undone. We permanently delete:

The business, its settings and locations, and all owner and staff accounts
Products, stock, sales, expenses, purchase orders, stocktakes, customers and suppliers, debts and ledger entries, reports and summaries
Message history, pending AI actions, and activity records
Linked WhatsApp, Telegram, and Messenger connections, and any messages from them that had not yet been processed
Uploaded files, such as a dashboard background image

What we keep, and why:

Records of subscription payments made to Ojunai (amount, currency, date, plan, and the payment provider’s reference, without names or contact details), because we must keep them for tax and accounting. They are deleted 8 years after the payment
A record that deletion was requested and completed (dates and an internal account ID only)
Short-lived security records that contain no message content, such as hashed rate-limit counters and provider message IDs, which expire automatically

Backups: encrypted database backups made before your account was deleted may still contain your data for up to 90 days. Backups older than 90 days are deleted automatically, so deleted data is gone from our backups within 90 days. We do not edit backups, and we do not use them to bring back a deleted account.

Copies outside Ojunai: chats stay in your own WhatsApp, Telegram, or Messenger app until you delete them there. Meta, Telegram, payment providers, and Anthropic handle any data they hold under their own policies and our agreements with them. Your business may have its own legal duty to keep financial records, so download an export before you request deletion if you need one.

Disconnecting a channel in Settings stops that WhatsApp, Telegram, or Messenger account from accessing Ojunai, but it does not delete your history. To remove your data, request permanent deletion as described above.

8. Security

Ojunai uses technical and organizational safeguards intended to protect information, including:

HTTPS/TLS for supported network connections
Role- and permission-based access controls
Webhook signature verification and channel/account binding checks
Confirmation requirements for sensitive or high-impact actions
Data stored in our databases and backups is encrypted at rest, including messages waiting to be processed
Audit logging, rate limits, deduplication, and operational monitoring

No system is completely secure. If a security incident affects your information, Ojunai Technologies Inc. will investigate and notify you and the relevant authorities as required by applicable law. Report suspected security issues to contact@ojunai.com.

9. Your Choices and Rights

Depending on your location and applicable law, you may have rights to request access, correction, export, deletion, restriction, or objection. You can also:

Disconnect an available messaging channel from Ojunai
Stop messaging Ojunai through WhatsApp, Telegram, or Messenger
Export available business data from the dashboard
Request permanent deletion of your account and its data (see Permanently deleting your account)

We may need to verify your identity, account ownership, and authority before completing a request. Some rights are subject to legal exceptions and record-retention obligations.

10. Cookies and Analytics

We use only the cookies and browser storage needed to run the service, plus limited analytics. We do not use advertising cookies or share information for third-party advertising.

Sign-in cookie: the dashboard uses one authentication cookie, oj_auth. It is Secure, HttpOnly, and SameSite=Strict, so scripts cannot read it and other sites cannot send it.
Browser storage: the dashboard stores sign-in state, your selected branch, theme, currency and billing preferences, and app-install preferences on your device. Signing out clears your sign-in state.
App analytics: when you install or open the Ojunai app (PWA), the dashboard sends a small event to Ojunai’s own servers. We store the event details, your IP address, and your browser’s user-agent.
Website analytics: this website uses Cloudflare Web Analytics, which counts visits without setting cookies. Other parts of the site, such as hCaptcha on the demo-request page, may set their own cookies.

11. Changes to This Policy

We may update this policy as products, providers, or legal requirements change. The effective date will be updated when a revised policy is published. Where required, we will provide additional notice through an appropriate account or communication channel.

12. Contact

Privacy questions and requests can be sent to contact@ojunai.com.