Legal
Privacy policy
Last updated 18 September 2026.
This explains what Njiwa holds about you and about the people you message, why, for how long, and what you can do about it. It applies to njiwa.upeo.ai, to the console, and to the API.
UPEO.AI is responsible for the data described here. Write to hello@upeo.ai about any of it.
The short version
We hold what an account needs to exist, and the messages you send and receive so that we can deliver them and show them to you. We do not sell any of it, we do not use it for advertising, and we do not use your messages to train anything.
Your card details never reach us. There are no advertising or analytics cookies on this site. Nothing here is shared with anybody except the handful of services listed below that are needed to run Njiwa, and where the law requires it.
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, at hello@upeo.ai.
What we hold
Your account. The email address you sign up with, a password stored only as a hash we cannot reverse, your name and business name if you give them, and the WhatsApp number you give us so that support can reach you. API keys are stored only as hashes: after a key is shown to you once, not even we can read it back.
Your numbers. The WhatsApp numbers you link, and the credentials the connection needs in order to stay linked without asking you to scan a code every time. Those credentials are for that connection and nothing else.
Your messages. What you send and what you receive: the text, the media, the number it went to or came from, when it was sent, and what happened to it. Media files you upload are stored so that they can be delivered.
How it is working. Delivery attempts, webhook attempts and their responses, error messages, and technical logs that include IP addresses, timestamps and the shape of the request. These are what let us answer "why did this not arrive".
Payments. The plan you chose, the amount, the currency, the payment reference and whether it succeeded. We never see or store your card number. That goes to Paystack, who take the payment.
Who is responsible for what
This matters and it is worth being exact about.
For your account data, we decide what is held and why, so we are responsible for it.
For the messages you send and receive, you decide who is messaged and what is said. You are responsible for that data, and we process it on your instructions in order to deliver it. That means it is your job, not ours, to have a lawful reason for messaging each person, to be able to show they agreed to hear from you, to tell them how you handle their information, and to answer them if they ask you about it. If somebody you messaged asks us instead, we will point them to you.
Why we hold it
- To provide the service you asked for. An account, keys, linked numbers, and the delivery of your messages. This is the performance of our contract with you.
- To keep it working and safe. Logs, delivery records, abuse and fraud prevention, and rate limits. This is our legitimate interest in running a service that stays up and is not used to hurt people.
- To take payment and keep the accounting records the law requires.
- To write to you about your account: a trial ending, a receipt, a change to these terms. You cannot opt out of those, because they are the service. We will only send you anything else if you ask for it, and every one of those has a way to stop.
- To answer the law. A valid legal demand, a tax obligation, a court order.
How long we keep it
- Your account and its messages: while the account is open. Closing the account deletes them.
- Or not the messages at all, if you say so. An account can tell Njiwa to stop keeping what was said, or to keep it for a set number of days and then drop it. What stays either way is the envelope - which number, which way, at what time, whether it arrived. The words, the caption, the attachment and the location go. Linking a number makes us one of your WhatsApp clients, so your messages are decrypted on our servers; what happens to them after that is policy rather than cryptography, and this is the switch that lets you disagree with ours. Two things stop working in exchange, and the console says so before you set it: there is no conversation to read back, and Signals has nothing to read, so it cannot be turned on at all.
- A trial that ends without a plan: nothing is deleted. Sending stops, and the account keeps its numbers, contacts and conversations for as long as the account is open.
- Media you uploaded: until you delete it or the account is closed.
- Technical logs: a short period, long enough to investigate a problem or an abuse report.
- Payment records: seven years, because tax law requires it. These are the amount, the date and the reference, never card details.
Deletion means deletion from the live system. Encrypted backups roll over on their own schedule and anything in them is overwritten within a short period rather than restored.
Who else sees it
Only what is needed to run Njiwa:
- DigitalOcean, whose servers the application and the database run on.
- Paystack, who take payments and hold the card details we never see.
- Our email provider, to deliver account email such as a trial reminder or a receipt.
- WhatsApp, because that is where your messages are going. Once a message leaves Njiwa it is handled by WhatsApp under their own policies, not ours.
We do not sell your data, we do not rent it, and we do not hand it to advertisers. We will disclose it if the law validly requires us to, and where we are allowed to tell you that it happened, we will.
If the business is ever sold, an owner takes it on under this same policy, and we will tell you before anything changes.
Njiwa runs on servers in India and the company is in Kenya, so your data crosses borders to reach us and to reach you. Ask at hello@upeo.ai if you need the detail for your own records.
How it is protected
Everything travels over HTTPS. Passwords are hashed, API keys are stored only as hashes, and webhook deliveries are signed so that your server can tell a real one from a forgery. Access to the production system is limited to the people who run it. Backups are encrypted.
What we will not tell you is that it is impossible to break into. No system is, and anybody who says otherwise about theirs is selling something. What we will do is take it seriously and tell you the truth if it happens.
If something goes wrong
If data is exposed in a way that puts you at risk, we will tell you and the relevant authority without undue delay, and within 72 hours of becoming aware of it where that applies. We will tell you what happened, what was affected, what we have done, and what you should do. We will not wait until we have a tidy story.
If you think you have found a security problem, tell us at hello@upeo.ai. We will take it seriously and we will not come after anybody who reports one in good faith.
What you can ask us to do
Whatever country you are in, you can ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything that is wrong;
- delete your account and its data;
- export your data in a form you can take elsewhere;
- stop using it for something you object to.
Email hello@upeo.ai. We will answer within 30 days. We may ask you to prove who you are first, which is a protection for you rather than an obstacle.
Some of it we have to keep even if you ask: a payment record the tax law requires, for instance. We will tell you if that applies and why.
If you are not happy with how we handled it, you can complain to the data protection authority where you live. In Kenya that is the Office of the Data Protection Commissioner.
Cookies
The console sets one cookie, which is what keeps you signed in. It is readable only by the server, it is not shared, and it is deleted when you sign out. There is nothing else: no advertising, no analytics, no tracking pixel, no third party watching you read this.
The one thing worth telling you is that our pages load their typefaces from Google Fonts, which means Google sees the request your browser makes for them, including your IP address. That is the only third party this site contacts.
Children
Njiwa is a tool for businesses and is not for anybody under 18. We do not knowingly hold data about children. If you believe we have, tell us and we will delete it.
Changes to this policy
If we change it, the date at the top changes. If the change matters, we will email you before it takes effect rather than quietly editing the page.
Questions about any of this go to hello@upeo.ai, or 0116888777 on WhatsApp.
Asking us about any of this
Email hello@upeo.ai or message 0116888777 on WhatsApp. A real person reads both.