Privacy Policy

Who we are

Sajama One (“we”, “us”) provides a shared inbox for customer conversations across your website and your messaging channels. This policy covers the sajamaone.com website and the Sajama One application. Questions about privacy can always be sent to support@sajamaone.com.

What we collect

Account data. The name, email address and role of the people who use a workspace, so we can sign them in and apply the right permissions. If a workspace uses SCIM provisioning, we also store the identity-provider identifier and active/deactivated status its administrator sends for each member; SCIM passwords are not accepted.

Conversation data. The messages that flow through your connected channels - their content, timestamps and delivery state - because that is the service you are using. This belongs to your workspace.

Visitor data. When a visitor chats with you through your website widget, we process the messages they send and a token that lets the conversation continue on their device. The widget does not collect their page history, query strings or timezone.

Billing data. We keep your plan and billing history. Your card details are handled by our payment provider and never reach our servers.

Phone numbers and call data. If you use the Android SMS channel or in-widget voice calls, we process the phone numbers people text from, and call metadata (when a call started, whether it was answered, how long it lasted). Voice-call audio travels directly between the two browsers: we do not receive, record or store it.

Our role

For the conversations, contacts and customer data in your workspace, you are the controller and we act as your processor: we handle that data only to provide the service and on your instructions (including export and deletion from within the product). For your own account, billing and support records, we are the controller. A data-processing addendum is available on request at support@sajamaone.com.

How we use it

We use this data to run the service you asked for: delivering your conversations, applying your teams and permissions, computing the analytics shown in your workspace, and billing your plan. We use it to keep the service safe and working, and to respond when you contact us. We do not use your customers' message content to advertise to anyone.

What we do not do

We do not sell personal data. We do not share your data with third parties except where needed to run the service - for example with the infrastructure and payment providers described below, or where the law requires it. We do not send your workspace' training content to answer for any other customer.

Service providers and messaging platforms

We use a small set of providers, each receiving only what its job needs: Supabase (database and storage) and Vercel (hosting) run the product; Resend sends transactional email; Lemon Squeezy processes payments as merchant of record and never shares full card details with us. If you enable them, Google or Microsoft handles only the sign-in handshake. File attachments are also sent over an encrypted connection to our malware-scanning service, which processes the bytes in memory to return a clean-or-rejected verdict before the file is accepted.

The channels you connect each process messages under their own terms and privacy policies once a message is delivered to them: Meta (WhatsApp, Instagram, Messenger), Telegram, Discord, Slack and LINE. For Android SMS, messages pass through the gateway you choose - by default the TextBee service and the Android phone you run it on, or your own self-hosted gateway - and then through your mobile carrier. If you connect HubSpot or Pipedrive, contact details are sent to your own account there. Providers may process data in other countries; where that happens, it is under their published transfer safeguards.

Cookies and local storage

We use the minimum necessary: a session cookie to keep you signed in, and local storage on your device so a website visitor's chat can resume and so your optional location-count choice below can be remembered for up to six months. We do not use third-party advertising cookies.

Optional website-visitor location counts

On our public website we ask before counting where visitors come from. Nothing is counted if you reject the choice or do not answer. If you allow it, our hosting platform supplies only a country code and, when available, a first-level region code, and we add one to an anonymous daily total for that country/region. We use those totals only to understand geographic interest in Sajama One.

For this feature our application does not store your IP address, city, postal code, coordinates, exact or browser-provided location, user agent, device or browser fingerprint, page history, referrer, name, email address or workspace. The random receipt identifier used to prove and withdraw consent stays in your browser; our server stores only a one-way hash of it with the choice, policy version and grant/withdrawal time. That receipt is not connected to an account.

You can allow or withdraw this at any time from Privacy choices in the website footer. Withdrawal stops any new count; it does not change an anonymous daily total that was already added because that total cannot identify you. We retain the minimised consent receipt and its grant/withdrawal events for up to 13 months for accountability, and anonymous daily totals for up to 25 months.

Your choices

You can export your workspace data, and you can delete your workspace, from within the product. If you would like a copy of data you cannot reach yourself, or want it corrected or removed, write to support@sajamaone.com and we will take care of it.

Your rights

Depending on where you live - including under Ghana's Data Protection Act and the EU/UK GDPR - you may have rights to access, correct, export, object to or delete your personal data, and to complain to your local regulator. Workspace admins can export or delete workspace data in the product at any time; for anything else, contact us and we will respond within the time the law allows. Where we act as processor, we will forward requests about your customers' data to you and help you answer them.

Retention

We keep conversation and account data while your workspace is active, and for a short period after it is closed so deletion can be undone, after which it is removed. You control how long your own knowledge base and training content stay in your workspace. Optional website-visitor consent receipts are kept for up to 13 months and the anonymous daily country/region totals for up to 25 months, as described above.

Security

We protect your data with encryption in transit, encryption of stored channel and integration tokens, workspace-level isolation and role-based access control. See our Security page for more.

Changes

If this policy changes in a way that affects you, we will say so clearly in the product or by email before the change takes effect. Continued use after a change means you accept the updated policy.