1. Introduction
Welcome to AMINA AI ("we," "our," or "us"), operated by SAYPEACE SOLUTIONS LTD, a company located in Zaria, Nigeria. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our AI-powered customer support platform ("Service"), in line with the Nigeria Data Protection Act 2023 (NDPA).
AMINA AI lets businesses create AI agents that answer their customers using the business's own information, on their website and on WhatsApp, Facebook Messenger and Instagram. Businesses build each agent's knowledge from documents, web pages and text, manage conversations across channels, and see conversation analytics.
2. Who Is Responsible for What
- Your account data (you and your team): we decide how it is used, so we are the data controller.
- Your customers' conversations and your knowledge base: we process these on your behalf and on your instructions, so your business is the data controller and we are the data processor. If a customer asks about their data, they should contact the business they chatted with; we will help that business respond.
3. Information We Collect
3.1 Account Information
Sign-in and sign-up are with Google only. When you sign in, Google shares your name, email address and Google account ID with us, and confirms that your email address is verified. We use these only to create your account and sign you in. We don't receive or store any password, and we don't access your Gmail, contacts, files or any other Google data.
We also keep your organization name, your team members and their roles, and a record of important account activity (such as sign-ins and changes to settings) for security.
Amina is currently free. If you ever make a payment, it is handled by our payment processor, and we don't see or store your full card details.
3.2 Messages and Conversations
To provide the Service, we collect and process:
- Messages exchanged between your customers and your AI agents
- Message details such as time, channel, and any rating or feedback left
- For WhatsApp, Messenger and Instagram, the sender identifier the platform provides (for example, a phone number or account ID) so replies reach the right person
- Technical data such as IP address, used to protect the Service from abuse (for example, rate limiting)
3.3 Knowledge Base Content
Content you provide so your agents can answer questions:
- Uploaded documents (PDF, Word, TXT and CSV)
- Web pages you import, including websites you ask us to keep in sync, which we re-check on the schedule you choose
- Text entries and FAQs you type in
We extract and store the text from uploaded files. We do not keep the original files.
3.4 Integration Credentials
To connect your channels, we store:
- Meta access tokens for Messenger and Instagram
- WhatsApp Business account connection details
- Webhook configuration data
Important: access tokens are encrypted before they are stored.
4. How We Use Your Information
4.1 Running Your AI Agents
We use your data to:
- Find the parts of your knowledge base that answer a customer's question
- Generate your agent's replies
- Produce the conversation insights and analytics you see in your dashboard
To generate replies, the relevant message, recent conversation and knowledge excerpts are sent to our AI service provider, which processes them on our behalf. We do not use your knowledge base or your customers' conversations to train AI models, and we do not sell your data.
4.2 Channel Integrations
We use your integration credentials only to:
- Receive and send messages through WhatsApp, Facebook Messenger and Instagram
- Manage the page and webhook connections you set up
4.3 Operating and Protecting the Service
- Sending you service emails such as sign-in, team invitations and important notices
- Detecting and preventing abuse, fraud and security incidents
- Understanding overall usage, using aggregated data that doesn't identify you or your customers, to improve the Service
5. Service Providers and Sharing
We share information only with providers that help us run the Service, and only what each one needs:
- Cloud hosting and database providers, which host our servers and store your data
- AI service providers, which generate your agents' replies and the search index for your knowledge base
- Google, for sign-in only
- Meta (WhatsApp, Messenger, Instagram), when you connect those channels: messages and the page or account details needed to deliver them pass through Meta's systems
- Email delivery providers, to send service emails
- Payment processor, only if you make a payment
Legal Requirements
We may disclose information if required by law, court order, or governmental regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
6. Where Your Data Is Processed
Some of our service providers store or process data outside Nigeria. When data leaves Nigeria, we rely on the safeguards the NDPA allows, such as contractual protections, so that it stays protected to a comparable standard.
7. Data Retention and Deletion
7.1 How Long We Keep Data
- Account data: while your account is active, and up to 30 days after you ask us to close it
- Conversations: while your account is active, unless you ask us to delete them sooner
- Knowledge base content: until you delete it or close your account
- Integration credentials: deleted when you disconnect the integration
7.2 Deletion Requests
You can delete knowledge base items yourself in your dashboard. To delete conversations or close your account, email us at support@saypeace.ng. We complete deletion requests within 30 days, unless the law requires us to keep something longer. Step-by-step instructions, including for people who messaged a business through Amina, are on our Data deletion page.
8. Your Rights
Under the NDPA you have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you.
Right to Correction
Request correction of inaccurate or incomplete personal data.
Right to Deletion
Request deletion of your personal data, subject to legal retention requirements.
Right to Data Portability
Request export of your data in a machine-readable format.
Right to Object or Withdraw Consent
Object to processing of your personal data for certain purposes, or withdraw consent you have given, at any time.
To exercise any of these rights, contact us at support@saypeace.ng. If you are not satisfied with our response, you can complain to the Nigeria Data Protection Commission (NDPC).
9. Security Measures
We use technical and organizational measures to protect your data, including:
- Encryption in transit (HTTPS/TLS) for all connections
- Encryption of stored access tokens for connected channels
- Google sign-in, so no passwords are stored with us
- Team roles, so only the right people can change or delete your data
- Checks on uploaded files and imported web addresses to block harmful content
- Protections that stop your AI agents from revealing their private instructions
- Rate limiting and monitoring to prevent abuse
No system is completely secure. If we become aware of a breach that affects your personal data, we will notify you and the NDPC as the law requires.
11. Children's Privacy
Accounts are not intended for anyone under the age of 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us at support@saypeace.ng and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the new version on this page and update the "Effective Date" at the top. For significant changes, we will also let account owners know by email.
13. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: