Privacy Policy

Tajilabs · Last updated: 29 August 2026 · Version 2.2

Tajilabs (“we”, “us”, “our”) provides technology services and software products including Tajilabs CRM (crm.tajilabs.co.ke). This policy explains how we collect, use, store, and delete personal information when you visit our website, use our products, or connect WhatsApp Business through our platform.

1. Who this policy applies to

Visitors to tajilabs.co.ke
Users of Tajilabs CRM (workspace members invited by a business customer)
End customers whose data is processed by a business using Tajilabs CRM (e.g. leads, contacts, WhatsApp messages)
Businesses that connect a WhatsApp Business Account (WABA) via our Tech Provider integration

2. Information we collect

Website & marketing

Name, email, phone, company, and message content submitted through contact or lead forms
Technical data: IP address, browser type, device information, cookies, and usage analytics

Tajilabs CRM

Account data: name, email, role, workspace membership, authentication logs
Business data entered by workspace users: contacts, companies, leads, deals, activities, campaigns, invoices, and related records

WhatsApp Business Platform (Meta Cloud API)

WhatsApp Business Account ID, phone number ID, display phone number, and connection tokens (stored server-side only)
Message content, sender/recipient phone numbers, delivery and read statuses, template names, and webhook event metadata
Facebook/Meta identifiers received during Embedded Signup or OAuth when a business connects WhatsApp

3. How we use information

Provide, operate, and improve our website, CRM, and integrations
Send and receive WhatsApp messages on behalf of connected businesses within Tajilabs CRM
Support sales, marketing automation, customer service, and reporting for workspace users
Security, fraud prevention, debugging, and compliance with applicable law
Communicate with you about service updates (with consent where required)

We do not sell personal data.

4. WhatsApp Tech Provider role

When a business connects WhatsApp through Tajilabs CRM, we act as a WhatsApp Tech Provider. We process message data on that business’s instructions so they can manage customer conversations in the CRM. Each workspace connects its own WhatsApp Business number. The business remains responsible for customer opt-in, message content, template approval, and compliance with WhatsApp Business Policy and Meta platform terms.

Meta processes data under its own terms when you use the WhatsApp Cloud API. See Meta Privacy Policy.

5. Legal bases (where applicable)

Performance of a contract (providing CRM and connected services)
Legitimate interests (security, product improvement, B2B communication)
Consent (marketing cookies, optional communications where required)
Legal obligation (records we must retain by law)

6. Sharing & subprocessors

We share data only as needed to operate the service, including with:

Meta Platforms, Inc. — WhatsApp Cloud API and Embedded Signup
Supabase — database, authentication, and edge functions (hosted infrastructure)
Vercel — website and CRM application hosting
Email and automation providers — transactional email and workflow automation where configured

Subprocessors are bound by confidentiality and data-processing obligations appropriate to their role.

7. Retention

We retain data for as long as your account or workspace is active, as needed to provide the service, and as required for legal, tax, or security purposes. WhatsApp connection tokens and message events are retained while the integration is active and deleted or anonymized after disconnection where practicable.

8. Your rights & data deletion

You may request access, correction, export, restriction, or deletion of personal data we control, subject to legal retention limits.

Contact: [email protected]

Meta / Facebook app data deletion callback:
https://ydxkhugocyqclalwzowa.supabase.co/functions/v1/meta-data-deletion
Meta may POST a signed request to this URL when a user removes our app. We log the request and provide a confirmation code. Status updates are published at this policy page (#data-deletion).

To disconnect WhatsApp from a workspace, use Settings → WhatsApp Cloud → Disconnect in Tajilabs CRM, or email us.

9. Security

We use encryption in transit (TLS), access controls, workspace isolation (multi-tenant RLS), and server-side storage of sensitive tokens. WhatsApp access tokens are not exposed in the browser.

10. International transfers

Our infrastructure providers may process data in regions outside Kenya. We use appropriate safeguards consistent with applicable data protection requirements.

11. Children

Our services are intended for businesses and are not directed at children under 18.

12. Changes

We may update this policy. Material changes will be reflected by updating the “Last updated” date above.

13. Contact

Email: [email protected]
General: [email protected]
Phone: +254 748 908 722
Location: Nairobi, Kenya
Terms: Terms of Service

← Back to Tajilabs