Privacy policy

Last updated: 9 October 2026

Semaji provides businesses with an inbox and an AI assistant for their customer conversations on WhatsApp, Instagram, Facebook Messenger, TikTok, Telegram and website chat. This policy explains what we collect and why. Semaji is operated by Semaji, United Arab Emirates, which is responsible for this data.

Two kinds of people

  • Our customers: businesses and their team members who use Semaji. We are responsible for their account data.
  • Their customers: people who message those businesses. The business decides how their conversations are used; we process them on the business's behalf.

What we collect

  • Account data: name, email, password (stored hashed by our authentication provider).
  • Business data: business name, logo, product and policy information, assistant settings.
  • Conversation data: messages, names and identifiers that platforms share with the business (such as a phone number, Instagram username or Telegram name), and timestamps.
  • Connection data: access tokens for the channels a business connects, stored encrypted.
  • Usage data: counts of messages, AI replies and AI conversations, used for limits and billing.

How we use it

  • To deliver messages and show them to the business's team.
  • To generate AI replies and handover summaries from the business's own information.
  • To run, secure, support and bill the service.

We do not sell personal data and do not use conversations to train AI models.

Service providers

We use: Supabase (database, authentication, storage), Vercel (hosting), OpenAI and Anthropic (AI replies), Resend (email), Twilio (alert calls), Paddle (payments, as our reseller: it receives your billing details and card data directly; we never see card numbers), and the messaging platforms each business connects (Meta, TikTok, Telegram). Some of these process data outside the country where you or the business are; we rely on their contractual safeguards for those transfers.

Retention and deletion

Conversation data is kept while the business's account is active. A business can delete conversations or its whole workspace; see data deletion. People who messaged a business should contact that business first; we will help it act on the request.

Your rights

Depending on where you live (for example under the GDPR in Europe, or your own country's data protection law) you may ask to access, correct or delete your data, or object to its processing. Email support@semaji.com.

Contact

support@semaji.com