Privacy

1. Who we are

shamarr is responsible for the personal data described here. We are based in Nigeria and serve businesses in Nigeria and other countries. Contact us about privacy at hello@shamarr.ai.

2. What we collect

We collect only what we need to run the service:

• Account details: your name, email address and sign-in records.
• Business details: your business profile, logo, photos, products, prices, contact details and site content.
• Workspace activity: edits, publishes, credit use and messages you send to Sai.
• Billing details: plan, billing country, currency and payment references from Paystack. We do not collect your full card number.
• Technical data: IP address, device and browser type, error logs and anonymous page and button counts. We do not use advertising trackers.

3. How we use it

We use your data to provide the service you signed up for, to keep accounts secure, to take payments, to answer support requests and to meet legal duties. We use anonymous counts to improve the product. We send service emails, such as sign-in codes and billing notices. We send product news only if you agree, and you can stop it at any time.

4. Sign in with Google

If you sign in with Google, we receive your name, email address and profile picture from your Google account. We use them only to create your account, sign you in and contact you about your account. We do not request access to Gmail, Google Drive, contacts or any other Google service.

We do not sell Google user data, use it for advertising, or send it to AI providers. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. You can remove shamarr's access at any time at myaccount.google.com/permissions.

5. Who processes it

We use these providers to run shamarr. They act on our instructions and may process data outside your country:

• Supabase: database and sign-in, hosted in the European Union.
• Cloudflare: hosting, storage and delivery of the builder and published sites, on a worldwide network. Cloudflare Web Analytics also counts page views on shamarr pages without cookies.
• xAI, with Anthropic and Google as fallbacks: AI drafting and edits, mainly in the United States.
• Paystack: payment processing.

6. AI providers

We send AI providers the business details needed to write or edit your site. We replace phone numbers and email addresses with placeholders where we can. xAI keeps API requests for up to 30 days for safety monitoring. We do not sell your data or use it for advertising.

7. International transfers

When data leaves your country, we rely on safeguards allowed by the law that applies, such as the transfer rules of the Nigeria Data Protection Act and standard contractual clauses for data from the European Union or the United Kingdom.

8. How long we keep it

We keep account and site data while your workspace is open. Published versions are kept so you can restore an older site. Backups are encrypted and kept for up to 30 days. Billing records are kept as long as tax and accounting law requires. When you delete your workspace, we delete or anonymise the rest within 30 days, unless we must keep something for a legal reason.

9. Your rights

You can ask to access, correct, export or delete your personal data, to object to some uses, or to withdraw consent. These rights come from the Nigeria Data Protection Act 2023 and, where they apply to you, from laws such as the GDPR in the European Union and United Kingdom, POPIA in South Africa, the Data Protection Act in Kenya and the Data Protection Act in Ghana.

Email hello@shamarr.ai and we will reply within 30 days. You can also complain to your data protection regulator, which in Nigeria is the Nigeria Data Protection Commission.

10. Visitors to published sites

Each business decides what its published site shows and is responsible for its own customer data. We host published sites and keep short technical logs to keep them secure and online. Messages sent on WhatsApp or by phone go straight to the business and do not pass through shamarr.

11. Cookies

We use essential cookies to keep you signed in and to protect forms. We do not use advertising cookies. Page view and button counts on shamarr pages use no cookies. Published sites do not set tracking cookies from shamarr.

12. Children and changes

shamarr is not for children under 18. We will post a new date on this page when this policy changes and email workspace owners about important changes.