Privacy Policy

1. Introduction

This Privacy Policy describes how Phasla Solutions (“we”, “us”, “our”) collects, uses, shares and protects personal information when you use Jahez (the “Service”) at jaheznow.com and app.jaheznow.com. Jahez is an AI conversational management and auto-reply platform for businesses connecting WhatsApp, Instagram, Messenger and Telegram. It covers both you, our customer, and the people who message your business through a channel you connect. By creating an account or using the Service you agree to this Policy. Where you connect a messaging channel, you act as the controller of your customers' conversation data and we act as your processor, handling it on your instructions and only to provide the Service. You are responsible for having a lawful basis to message those customers and for telling them how their data is handled.

2. Information We Collect

Account information: your name, email address, phone number, business or store details, profile image, and the credentials you set when registering. Channel and messaging data: when you connect WhatsApp, Instagram, Messenger or Telegram, we process message content, sender identifiers and profile names, media and its metadata, and the webhook events needed to deliver replies and manage conversations. Business content you upload: product catalogs, prices, inventory, persona and knowledge-base documents, and images. Technical and usage data: device and browser information, IP address, log data and product usage, used to operate and secure the Service. Billing data: plan, seats, invoices and payment status. We never receive or store your full card number — our payment provider holds the card and returns only a token and the last four digits.

3. How We Use Your Information

To provide, operate, maintain and improve Jahez; to power AI replies and conversation workflows on your connected channels; to authenticate users and secure accounts; to provide support; to send service and billing notices; to monitor abuse and enforce our Terms; and to comply with legal obligations. We do not sell your personal information or your customers' conversation content, and we do not share it with advertisers.

4. Artificial Intelligence and Automated Replies

Jahez is an AI product, and this section says plainly what that means for data. To generate a reply, we send the relevant conversation content — the incoming message, recent conversation history, your persona and catalog content, and the customer's name or handle where present — to a third-party AI model provider, currently Google (Vertex AI and Gemini on Google Cloud). Conversation content is also converted into vector embeddings and stored in our search database so the AI can retrieve your catalog and knowledge base. We do not use your content or your customers' messages to train our own models, and we use these providers under terms that do not permit them to train their models on our submissions. AI output can be wrong: replies are generated, not reviewed by a person before sending, and you remain responsible for what your configured agent says. Agents are instructed to state that they are an automated AI assistant whenever a customer asks whether they are talking to a person, and never to deny it. Nothing in the Service makes legally significant decisions about a customer automatically, and a human on your team can take over any conversation at any time.

5. Service Providers and Subprocessors

We share data with the providers we need to run the Service, under confidentiality and data-protection terms, and only for that purpose. They are: Google Cloud (Vertex AI and Gemini for AI replies, Cloud Storage for uploaded files, Firebase for real-time updates and push notifications, and Google Sign-In); Meta Platforms (WhatsApp Business Platform, Instagram Messaging and Messenger); Telegram (bot messaging); Kashier (payment processing and stored card tokens); Qdrant (vector search over your catalog and conversations); Cloudflare (Turnstile bot protection); and our email delivery provider (transactional email). Some of these providers process data outside your country, including in the United States and the European Union. We may also disclose information where the law requires it, to protect rights and safety, or in connection with a merger, acquisition or sale of assets. We will update this list before adding a subprocessor that handles personal data.

6. Meta and Third-Party Platforms

Jahez integrates with Meta products through official APIs. Data we receive from Meta is used only to provide the Service you request, in line with Meta's Platform Terms. Your use of those platforms remains subject to Meta's own terms and policies. When you disconnect a channel or remove our app from your Meta settings, we stop receiving new data from that connection.

7. Cookies and Local Storage

We use only what the Service needs to work. On app.jaheznow.com that is a signed session cookie to keep you logged in, a Cloudflare Turnstile cookie to block automated sign-ups, and browser local storage for your own preferences such as language and theme. We run no advertising pixels, no analytics suites and no third-party behavioural tracking on either site, so there is nothing here to opt out of. Connecting a Meta channel loads Meta's own login SDK at that moment, and Meta may set cookies under its own policy when you do.

8. Data Retention

Media sent through connected channels is deleted automatically about 14 days after it is stored. Closing your account takes effect immediately: you are signed out, your workspaces stop, your AI agents stop replying and no further billing is taken. For 30 days you can sign in again and reopen it exactly as it was; after 30 days the closure is permanent and neither you nor we can reverse it. We then permanently delete your conversations and their attachments, your product catalogue and the search data built from it, your connected channels and their stored credentials, your API keys, your notification history, your uploaded files and your sign-in credentials, and we release your email address and phone number for use on a new account. We keep four things, each for a stated reason: your contact and order records, so your business history stays complete and past orders can be settled; your invoices, payments and wallet history, which tax and accounting law obliges us to retain; aggregate daily counts of messages, conversations and spend, which identify no individual and are used to run and improve the Service; and security and fraud-prevention records, including the email address and phone number used to claim a free trial, so the same person cannot claim another. What we keep is held on our own secured infrastructure, is not visible to other customers or to your former workspace members, and can be opened only by a small number of authorised administrators for the purposes above. Credentials and payment tokens are encrypted, and all traffic travels over encrypted connections. Data in a workspace owned by another organisation is not deleted because one member leaves it. You can ask us to erase your personal data at any time. We cannot erase records we are required to keep for tax, accounting, security or fraud prevention, and aggregate statistics identify no individual, so they are not affected.

9. Data Security

We apply industry-standard technical and organisational measures: encryption in transit, encryption at rest for sensitive fields such as stored payment tokens and channel credentials, role-based access within your workspace, and session revocation. No method of transmission or storage is completely secure, and we continue to improve our controls. If a breach affects your personal data we will notify you and the relevant authority as the law requires.

10. Your Rights and Data Deletion

Depending on where you live, you may request access to, correction of, a copy of, or deletion of your personal data, object to or restrict certain processing, and withdraw consent. You can update your details and close your account from your profile page at any time, and disconnect any channel from the channels page. Closing your account is reversible for 30 days and permanent after that — see Data Retention above for exactly what is destroyed and what we keep. To make a request by email, write to [email protected] from the address on your account. Records we are required to keep for tax, accounting, security or fraud prevention are not erased on request. We respond within a few business days and complete verified requests within 30 days. If a person who messaged your business asks us to delete their data, we will refer them to you, since that data is yours to control. You may also complain to your local data protection authority.

View Data Deletion Instructions

11. Children's Privacy

Jahez is for business users and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal data, contact [email protected] and we will delete it.

12. Changes and Contact

We may update this Policy. The “Last updated” date changes when we do, and we will tell you by email or in the app before a material change takes effect. For any privacy question or request, contact [email protected]. Operator: Phasla Solutions (phasla.com).