Last updated 5 October 2026
Naamo is a customer-support platform. Businesses connect their WhatsApp, SMS, phone, Messenger, Instagram, and web-chat channels, and Naamo's AI agent and their own team answer customers in one place. This policy explains what data that involves, who controls it, and what we do with it. It covers this website (naamo.ai) and the Naamo application (app.naamo.ai).
The business you talk to is in charge of your conversation. When you message or call a business that uses Naamo, that business decides why and how your data is used (it is the “controller”). Naamo handles that data on the business's behalf and instructions (we are the “processor”). For the accounts of the businesses and team members who sign in to Naamo, and for visitors to this website, we are the controller.
We do not sell personal data, we do not use it for advertising, and Naamo never asks customers for passwords, PINs, or card numbers.
AI processing. Conversation content is sent to the AI model providers listed below only to produce the answer, check, or review requested. We use their commercial API services, under which our customers' content is not used to train their models. A business's data is never used to train or answer for another business.
When a business connects its WhatsApp Business Account, Facebook Page, or Instagram account to Naamo, Naamo receives permission to send and receive messages for the number or account the business selected, and to read that account's phone numbers, message templates, and quality status. We use this access only to operate that business's support desk. Messages travel through Meta's platforms and are subject to Meta's terms and privacy policy as well. A business can remove Naamo's access at any time by disconnecting the channel in Naamo or in its Meta Business settings.
Supabase (database, sign-in, file storage — United States), Hostinger (servers and website hosting), Cloudflare (network security), Anthropic and Meta (AI models), Meta (WhatsApp, Messenger, Instagram), Twilio (SMS, phone calls, and WhatsApp through Twilio), Resend (email delivery), Slack and Microsoft (the team's AI coworker in Slack or Microsoft Teams, when connected), Composio (connections to other business apps, when used), Sentry (error monitoring — technical error reports with e-mail addresses and phone numbers removed; United States), and Google (demo form and website fonts). Each receives only what it needs to perform its function.
Conversation and business data is kept while the business's workspace is active. A business can delete customers, conversations, documents, and knowledge at any time. When a workspace is closed, its data is deleted within 30 days, except records we must keep by law; backups expire within 30 further days. Demo requests are kept only as long as they are useful for reaching out about Naamo, and at most 24 months.
Each business's data is isolated at the database level; access is role-based; traffic is encrypted in transit; channel credentials are stored server-side only; incoming messages from providers are verified with their signatures; and every AI action is logged. More on our Security page.
When you text a business that uses Naamo, we use your phone number and your messages only to answer you on that business's behalf. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are never shared with any third party. Reply STOP to stop receiving texts and HELP for help; message and data rates may apply. See the SMS terms in our Terms.
We disclose personal data to a government or other public authority only when the law requires it. For every such request we: (1) review whether it is legally valid and properly scoped before responding; (2) challenge it, including in court where appropriate, if we believe it is unlawful, overbroad, or inconsistent with applicable law; (3) disclose only the minimum data strictly necessary to comply; and (4) keep a written record of the request, the authority and people involved, the legal basis, and our response. Where the law allows, we tell the affected business before disclosing its data so it can seek to protect it.
If you are a customer of a business that uses Naamo, contact that business to access, correct, or delete your data — we help them fulfil your request, and you can also write to us and we will route it. Businesses, team members, and website visitors can exercise their rights by writing to [email protected]. See Data deletion for the exact steps. We reply within 7 days.
Naamo serves businesses around the world, so data may be processed in the United States and in the countries where our providers operate. Naamo is a business tool and is not directed to children. We will post any change to this policy on this page and update the date above.
Naamo — [email protected]