Privacy Policy

This Privacy Policy explains how Diyaad (the "Diyaad" platform, "we", "us") collects, uses, stores, shares and protects information when you visit diyaad.com, request a demo, start a trial, subscribe to a plan, or use our CRM, messaging, automation, and AI features.

Diyaad is operated from 26 Miriam Way, Montego Bay, Jamaica. For the purposes of data protection law we act as the data controller for information you give us about yourself and your business, and as a data processor for the contact and customer records your business uploads or collects through the platform.

This policy applies to the website and the Diyaad service. It does not apply to third-party tools you connect (for example WhatsApp and Meta business services) or to websites we link to. Those services have their own privacy practices, which we encourage you to read.

Information you give us

• Contact and account details: name, email address, phone number, WhatsApp number, business name, and role.
• Billing details: plan chosen, invoice history, and payment status. Full card numbers are handled by our payment processor — we receive a confirmation and the last four digits only.
• Business information you add: customers and leads, notes, appointment and deal records, messages you write, templates, and documents you upload.
• Content of support conversations, demo requests, and enquiry forms you submit on this site.

Information collected automatically

• Usage data: pages and features viewed, buttons and actions used, messages sent, automation runs and their outcomes.
• Device and technical data: IP address, browser and device type, operating system, referring page, and approximate location derived from IP.
• Communication metadata: timestamps, delivery and read receipts, and opt-out status for messages your business sends through Diyaad.

Information from third parties

If you connect WhatsApp, Instagram, Facebook, TikTok, a calendar, or a payment provider, we receive the profile, message, and permission data those services make available to us under your own account and their terms.

• To deliver the service: run your CRM, unified inbox, appointment reminders, review and referral requests, bulk campaigns, invoices, and reports.
• To operate automations you configure, including sending messages to your contacts on your behalf and recording whether they were delivered, opened, or answered.
• To provide the Diyaad AI assistant: to draft, summarise, and organise the content you ask for, using your own business data as context.
• To create and secure your account, authenticate logins, and detect abuse, fraud, spam, and security incidents.
• To provide support, respond to enquiries, and send service notices such as downtime, security, and billing messages.
• To improve the product through aggregated and de-identified analysis of how features are used.
• To comply with legal obligations, enforce our Terms of Service, and defend our legal rights.

We do not use your customer data to train general AI models, and we do not build advertising profiles from it.

Where data protection law requires a lawful basis, we process information on the basis of performance of our contract with you (delivering the service you pay for), your consent (marketing messages, optional cookies, and messaging preferences you switch on), legitimate interests (product improvement, fraud prevention, and security), and legal obligation (tax records, lawful requests, and dispute handling). Where you give consent, you can withdraw it at any time without affecting processing that already happened.

We do not sell, rent, or trade personal data to advertisers or data brokers. We share information only in these limited ways:

• Service providers: hosting and infrastructure, database and storage, email and SMS delivery, WhatsApp and social messaging gateways, payment processing, and customer-support tooling. Each provider is contractually limited to using data only to perform our instructions.
• Messaging networks you connect: messages you send through Diyaad pass through WhatsApp, Meta, TikTok, or telecom carriers, each governed by its own terms and policies.
• Professional advisers: our accountants, auditors, and lawyers, under confidentiality obligations.
• Corporate transactions: in a merger, acquisition, financing, or asset sale, customer records may be transferred as a business asset, subject to this policy.
• Public authorities: where we are legally required or permitted to do so, for example to respond to a valid court order, tax authority, or fraud investigation.

Diyaad exists to help you hold and work your own customer relationships. You own the data you upload or collect through the platform, and we hold it only to provide the service to you.

In return, you agree to the following, because your customers look to you — not to us — for how their information is handled:

• You have a lawful basis to collect and use each contact's details, and you have obtained any consent required by law before sending marketing messages by email, SMS, or WhatsApp.
• You provide your own privacy notice to your customers and tell them their information is processed with tools such as Diyaad.
• You honour opt-outs and stop requests promptly, and you keep accurate contact records.
• You do not upload sensitive categories of information (health, biometric, religious, political, or children's data) unless the platform feature and your lawful basis clearly allow it.
• You are responsible for the content your business sends through Diyaad, including AI-assisted drafts, which you should review before sending.

If a customer asks you to delete or correct their information, you can do it directly in your account. You can also ask us to act on your instruction, and we will.

We use a small number of cookies and similar technologies: strictly necessary cookies that keep you logged in and protect forms from abuse; preference cookies that remember display choices; and analytics cookies that tell us which pages and features are used so we can improve them. Analytics cookies are only set where your browser and regional settings allow, and you can block or clear cookies in your browser at any time without losing access to the site. Blocking necessary cookies may prevent sign-in from working.

Account and business data is kept while your account is open. When you close an account, we delete or anonymise your data within 30 days, except copies held in automated backups, which expire on a rolling cycle of up to 90 days, and records we must retain by law (such as invoices and tax records). Message logs, delivery receipts, and automation history are kept for the same period so that your reporting stays accurate. Where you ask us to delete something specific, we act within 30 days and confirm completion by email.

Data is encrypted in transit using TLS and encrypted at rest, access is limited to staff who need it and is logged, passwords are stored in a protected form, and we review our systems for vulnerabilities. We take reasonable technical and organisational steps to protect your data, but no method of transmission or storage is completely secure. If a breach affects your data and we are required to notify you, we will do so without undue delay.

Diyaad is based in Jamaica, and your data may be processed or stored in other countries where our hosting and messaging providers operate. Where information leaves Jamaica, we rely on provider contracts and safeguards that require an equivalent standard of protection. Jamaica's Data Protection Act (SDPA) applies to our processing, and its principles are broadly aligned with the standards most of our customers are already used to.

Subject to applicable law, you can ask us to:

• Confirm what personal data we hold about you and give you a copy of it.
• Correct anything inaccurate or incomplete.
• Delete your personal data or close your account.
• Give you your data in a portable, machine-readable format.
• Stop or pause marketing messages, or object to processing based on legitimate interests.
• Restrict or stop automated decision-making that has a significant effect on you.

Email support@diyaad.com with the subject "Privacy Request". We respond within 30 days and may need to verify your identity first. Marketing emails always carry an unsubscribe link, and WhatsApp or SMS opt-outs can be sent to the business that contacted you. If you are not satisfied with our answer, you may complain to the supervisory authority that regulates your business, or to the Information Commissioner of Jamaica.

Diyaad is a business tool intended for organisations and adults aged 18 and over. We do not knowingly collect information from children, and you may not use the platform to store children's personal data or to market to children.

We may update this policy as the product, providers, or law change. The effective date at the top shows when it last changed. If a change materially reduces your protections, we will email you and post a notice on this page before it takes effect; continuing to use Diyaad after that date means the updated policy applies.

For any privacy question, request, or complaint: support@diyaad.com, +1 (876) 282-6054, or 26 Miriam Way, Montego Bay, Jamaica.