Privacy Policy

Tukana (“Tukana,” “we,” “us,” or “our”) builds the operating system for customer conversations in Africa. We provide AI-powered engagement, sales, support, and voice automation across channels like WhatsApp, Instagram, Facebook, X, LinkedIn, TikTok, and voice.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to all users of Tukana, including workspace owners, team members, and their end customers whose messages we process on their behalf.

By using Tukana, you agree to the practices described here. If you do not agree, you should not use the platform.

We collect information necessary to operate, secure, and improve Tukana:

• Account data — your name, email address, phone number, company name, industry, and team size you provide during signup or onboarding.
• Workspace data — company profile, selected plan, billing details, and team member invitations.
• Conversation data — messages, calls, and interactions routed through connected channels on behalf of your business. We process this data as a processor acting on your instructions.
• Contact data — customer names, phone numbers, and profiles stored in your Tukana CRM, provided by you or your channels.
• Usage data — product analytics such as feature usage, session duration, and device/browser information collected to improve reliability.
• Payment data — billing records kept by our payment partners. We do not store full card numbers on our servers.

We use the information we collect to:

• Provide, maintain, and improve Tukana features including the unified inbox, CRM, AI agents, support desk, and voice automation.
• Connect and synchronize your messaging channels so conversations flow into your workspace.
• Generate AI-powered summaries, replies, and analytics from your conversation data, on your behalf.
• Process payments, issue invoices, and manage your subscription.
• Send service, security, and account notifications, and respond to support requests.
• Detect, prevent, and address fraud, abuse, and security issues.
• Comply with applicable laws and regulatory obligations in the markets we operate in.

Where applicable under data protection laws such as the Nigeria Data Protection Act (NDPA) and the EU General Data Protection Regulation (GDPR), we process personal data on the following bases:

• Performance of a contract — to deliver the Tukana services you signed up for.
• Legitimate interests — to secure the platform, prevent fraud, and improve the product.
• Legal obligation — to comply with regulatory, tax, and law-enforcement requirements.
• Consent — for optional analytics, marketing, and cookie-based personalization, which you can withdraw at any time.

We do not sell your personal data. We share information only with the following categories of recipients:

• Messaging providers — WhatsApp, Instagram, Facebook, X, LinkedIn, and TikTok, when you connect those channels to Tukana, so messages can be sent and received.
• Payment providers — to process subscription payments and issue refunds.
• Cloud infrastructure — hosting and storage providers used to run Tukana.
• AI providers — services that generate summaries, replies, and analytics from your conversation data, under data-processing agreements that prohibit them from using your data to train their own models.
• Legal authorities — when required by law, court order, or to protect Tukana's rights and safety.

We keep your data only as long as needed to provide the service and comply with legal obligations:

• Active workspace data is retained for the lifetime of your account.
• When you cancel, conversation and CRM data is held for a grace period to allow reactivation, then permanently deleted within 90 days unless legal retention requires otherwise.
• Billing records are retained for the period required by tax and accounting law.
• Server and audit logs are retained for up to 12 months for security and debugging.

We take reasonable technical and organizational measures to protect your data, including:

• Encryption in transit using TLS and at rest in managed databases.
• Row-level access controls so each workspace can only access its own data.
• Separation of privileged (service) access from user-facing access.
• Regular security reviews and dependency scanning.
• Audit logging of administrative actions.

No method of transmission or storage is fully secure. If a breach occurs that is likely to risk your rights, we will notify you and the relevant authority without undue delay.

Depending on where you live, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data, subject to legal retention.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests or for marketing.
• Withdraw consent — at any time, where processing relied on consent.

To exercise any of these rights, email privacy@omniai.africa. We will respond within 30 days.

We may disclose personal information when required to do so by applicable law, regulation, legal process, or a valid request from a governmental authority.

Before disclosing information, we review requests to ensure they are legally valid and applicable. Where permitted by law, we limit disclosures to the minimum amount of information necessary to comply with the request.

We maintain records of legal requests and our responses to them, unless prohibited by law.

Tukana serves African businesses and may process data in data centers located within and outside Africa. When we transfer data internationally, we rely on appropriate safeguards such as standard contractual clauses and only work with providers that meet comparable protection standards.

We use essential cookies to keep you signed in and remember your preferences, and optional analytics cookies to understand product usage. You can control optional cookies through your browser settings or our cookie preferences. Essential cookies cannot be disabled, as the service would not function without them.

Tukana is a business-to-business product and is not intended for use by individuals under 18. We do not knowingly collect personal data from children. If you believe a minor has provided us data, contact us and we will delete it.

We may update this Privacy Policy to reflect product, legal, or regulatory changes. We will notify workspace owners of material changes by email or in-app at least 30 days before they take effect. Continued use after the effective date constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or your data, contact us:

• Email: privacy@omniai.africa
• Data Protection inquiries: dpo@omniai.africa
• Mailing address: Tukana, Lagos, Nigeria