Legal
Privacy Policy
Last updated: August 4, 2026
Juma AI ("Juma," "we," "us") provides AI phone and WhatsApp reception services for real estate brokerages. This policy explains what we collect, how we use it, and your choices. Contact us at hi@jumaflow.com.
1. Information we collect
Account and organization data
- Name, email, password (hashed), role, and organization profile details you provide.
- Billing and subscription information processed by our payment provider.
Communications data
- Voice call metadata, recordings/transcripts (where enabled), lead qualification fields, and appointment details.
- WhatsApp inbound and outbound message content, phone numbers, delivery status, and related conversation logs used to operate the AI assistant.
Meta / WhatsApp Business Platform data
- When you connect WhatsApp via Meta Embedded Signup, we receive WhatsApp Business Account (WABA) IDs, phone number IDs, display numbers, verified business names, Meta Business IDs, and access tokens needed to send and receive messages on your behalf.
- We may store the Meta app-scoped user ID of the person who authorized the connection so we can honor Meta data-deletion and deauthorization requests.
- Webhook payloads from Meta (message events, account updates, quality updates) used to deliver messaging and maintain connection health.
Technical data
- IP address, device/browser information, and basic usage logs for security and reliability.
2. How we use information
- Provide, secure, and improve the Juma service (voice, WhatsApp, calendar, lead tools).
- Qualify inbound real estate inquiries and notify your team — not for unsolicited bulk marketing or spam.
- Authenticate Meta/WhatsApp connections and register phone numbers on Cloud API.
- Comply with law, prevent abuse, and respond to support or deletion requests.
3. Sharing
We share data only as needed to operate the product:
- Meta / WhatsApp:message delivery, account management, and webhook verification under Meta's terms and your WABA authorization.
- Infrastructure and AI providers (e.g. hosting, voice, model APIs) under contractual confidentiality obligations.
- Payment processors for subscription billing.
- Authorities when legally required.
We do not sell personal information.
4. Retention
Account and organization data are kept while your workspace is active. WhatsApp connection credentials are removed when you disconnect or when Meta sends a deauthorize / data-deletion request. Conversation and call records are retained for your brokerage's operational history unless you request deletion or close the account, subject to legal retention needs.
5. Security
Access tokens and WhatsApp two-step PINs are encrypted at rest. Webhooks are verified with Meta signatures. Access is restricted by organization role. No method of transmission or storage is 100% secure; report concerns to hi@jumaflow.com.
6. Your rights and Meta data deletion
You may access or update profile data in the dashboard, disconnect WhatsApp, or request account deletion by emailing us. If you remove our app from Meta or request deletion via Facebook settings, Meta calls our data deletion endpoint; we remove Meta-linked WhatsApp credentials and related connection data and provide a confirmation code and status page.
7. Children
Juma is a business service and is not directed to children under 16.
8. Changes
We may update this policy. Material changes will be reflected by the "Last updated" date on this page.
9. Contact
Privacy questions: hi@jumaflow.com
Terms of Service: jumaflow.com/terms