Data Compliance

Privacy Policy

How we process and protect data within our AI-driven customer care ecosystem, tailored for Kenyan and global businesses.

Policy v2.1 Last Updated: June 9, 2026

1. Overview

SHINIT AI ("we," "our," or "us") provides sophisticated conversational AI agents. We are registered in Nairobi and comply with the Kenya Data Protection Act (2019). This policy outlines our role as a "Data Processor" when handling your customer interactions.

2. Data Categories

Business Intelligence

Catalogs, FAQs, and proprietary manuals you upload to ground the AI's logic.

Customer Metadata

Contact details and interaction history captured via WhatsApp, IG, and Web widgets.

3. AI Processing Logic

Our infrastructure leverages secure APIs to process natural language. We enforce strict data handling protocols with our sub-processors:

Meta Business Cloud Official API processing for WhatsApp & Instagram.
Secure AI Endpoints Encrypted inference with zero-retention policies.

4. Security & Retention

  • Logs: Retained for 90 days for audit and handoff purposes.
  • Encryption: AES-256 at rest and TLS 1.3 in transit.
  • Location: Data is processed in regional secure zones.

Questions regarding your data?

Our Data Protection Officer (DPO) is available to ensure your business remains compliant and your customers' data stays private.