Privacy
Policy

This policy covers two related products. Ajeris Personal Agent is a one-to-one assistant for an individual, reachable on WhatsApp, SMS, Telegram, Slack, voice and other channels. Ajeris Business is a customer-service platform for small businesses: it answers a business's calls and messages, qualifies leads and acts on the owner's behalf. "You" means the person using the product in question. The sections marked Ajeris Business cover what Ajeris stores for a business about its customers and leads.

Only what Ajeris needs to act for you.

• ◆Your phone number, so you can reach your agent and it can reach you, and the name, email address and home address you choose to give
• ◆Your conversations with Ajeris on WhatsApp, SMS, Telegram, Slack, voice and other channels, including photos, documents and voice notes you send
• ◆Memories: facts and preferences Ajeris learns about you
• ◆Sign-ins for services you connect (Google, Microsoft 365, Notion, Slack and others), and what Ajeris reads from them to do what you ask, including the mail index where it is on for you
• ◆Your vault: sign-ins, authenticator keys and personal details you save so Ajeris can complete tasks for you
• ◆Meetings Ajeris joins or takes notes in for you: the transcript and a recap
• ◆Health information you log, if you use the health features
• ◆Locations you choose to share, and your home address if you save one
• ◆Billing details, handled by Stripe. Ajeris never sees or stores card numbers
• ◆Usage data: what ran, when, how long it took, errors and costs. Our service logs do not contain the content of your messages

To work for you, and from November 2, 2026, to improve Ajeris unless you switch that off.

• ◆Doing what you ask, across the services you have connected
• ◆Remembering context between conversations
• ◆Running the features you turn on, such as reminders, meeting recaps and inbox alerts
• ◆Finding and fixing errors, and keeping Ajeris and your account secure
• ◆Billing and account administration
• ◆Improving Ajeris, as described in the next section

We do not sell your data, and we do not use it for advertising.

From November 2, 2026, the conversations you have with Ajeris may be used to make it better for everyone. That can mean people at Ajeris reading examples to find and fix mistakes, testing new versions against real conversations, and, where our AI providers' terms allow it, training or fine-tuning models.

Only conversations by SMS can be used, and in future any channel Ajeris runs itself, which this page will name before it counts. Everything listed under Never used below stays out.

Ajeris tells each person about this once, in its next reply to them. Nothing from before that reply, or from before the date above, is ever used.

The switch

• ◆It is on by default. Turn it off with Improve Ajeris for everyone in Preferences on your manage page, or tell Ajeris, for example "stop using my chats to improve Ajeris".
• ◆Turning it off never changes how Ajeris works for you.
• ◆If you turn it off or delete your account, your conversations are left out of anything we do after that. Work already finished, such as a completed test or a model already trained, is not undone.

Never used, whatever the switch says

• ◆Anything from before November 2, 2026
• ◆Your vault: passwords, authenticator keys and personal details
• ◆Data from your connected accounts and anything derived from it, including replies, summaries, memories and search indexes made from it
• ◆Meeting recordings and transcripts
• ◆Conversations on WhatsApp, Telegram and Slack, and by voice, including Alexa: only SMS is eligible
• ◆Your precise location: locations you share, coordinates, and your home address
• ◆Health information, whether you log it in the health features or mention it in a conversation (health details in conversations are screened out before any use)
• ◆Voice recordings (the audio itself)
• ◆Payment details, one-time codes and passwords
• ◆Conversations of anyone we know to be under 18
• ◆Calls and messages between an Ajeris Business and its customers

Google user data has its own, stricter rules: see Google user data.

• ◆Storage: our database, hosted by Railway in the United States (US East). Railway encrypts data at rest with AES-256, according to its trust center.
• ◆Your credentials: passwords and authenticator keys in the vault, and the sign-ins for connected services, are encrypted again with AES-256 under our own key, which is kept apart from the database. They are decrypted only when a task needs them.
• ◆Never inside an AI model: when Ajeris answers, it sends the model what that answer needs. Your memories and recent messages go every time; older history and mail are looked up only when a question calls for them.
• ◆Search on our own servers: search over your memories, history and mail runs on our own servers, so no outside company sees your content to search it.
• ◆In transit: TLS 1.2 or higher on every connection to and from Ajeris.
• ◆Separation: every account's data is walled off from every other account by row-level security in the database, so a request made for one account cannot read another's.
• ◆Prompt injection: text that comes from emails, web pages and connected services is checked for hidden instructions before Ajeris acts on it, and critical actions, like sending an email, booking or paying, wait for your approval.
• ◆People: nobody at Ajeris reads your data except when you ask us to, for security or legal reasons, or as set out in Improving Ajeris.
• ◆Logs: our service logs record that something happened and how long it took, never the content of your messages.
• ◆Not end-to-end encrypted: Ajeris and its AI provider have to read a message to answer it. We do not claim otherwise.

Ajeris's servers and most of our providers are in the United States. If you use Ajeris from the UAE, Saudi Arabia or anywhere else, your data is sent to and processed in the United States.

We use the providers below to run Ajeris. Each receives only what its job needs and processes it for us.

Services you connect

When you connect Google, Microsoft 365, Notion, Slack, GitHub, HubSpot, Shopify, Square, Xero, QuickBooks, Spotify, Apple Music or Philips Hue, Ajeris exchanges data with that service on your behalf, under that service's own terms and privacy policy. You can disconnect any of them at any time.

Changes to this list

To hear before we add or replace a provider that handles personal data, email hi@ajeris.com with "Provider updates" in the subject. We update this list before a new provider receives any data.

Your data stays while it is useful to you, and some of it expires on a timer. Deleting your account deletes everything in our database at once; the second table shows what providers keep after that.

Copies kept by providers

You can do all of this yourself, at any time, from Preferences on your Ajeris manage page (ask your agent for the link), or in chat.

• ◆Improve Ajeris for everyone: switch it off or on in Preferences, or tell Ajeris.
• ◆See what Ajeris remembers about you, and change or forget any memory, in chat.
• ◆Disconnect any connected service. This deletes its sign-in and its mail index. We also revoke our access at the provider where the provider allows it (Google, Slack, Philips Hue, QuickBooks, Xero, Square); for the others, remove Ajeris in that service's settings as well.
• ◆Delete what Ajeris stored from a connected service, such as its mail index and the meetings found on its calendar, without disconnecting it.
• ◆Delete your location data: every location you shared, your saved home address, and the coordinates inside past messages.
• ◆Download your data: one file with your profile, messages, memories, reminders, health logs, meetings, and the list of your connections and vault items. Passwords, authenticator keys and access tokens are never included. The download link works once, for 10 minutes, in the browser that asked for it.
• ◆Delete your account and everything in it. See Deleting your account for what providers keep afterwards.

For anything else, such as deleting your conversation history without closing your account, correcting your data, or a question about your rights where you live, email hi@ajeris.com.

• ◆Sell your personal data, or share it with advertisers or data brokers
• ◆Use your data for advertising
• ◆Share your data with other Ajeris users or their agents
• ◆Use your vault, your connected accounts, your WhatsApp, Telegram, Slack or voice conversations, your precise location, health information (whether you log it or mention it in a conversation) or voice recordings to improve or train AI
• ◆Read a connected service for anything other than a feature you turned on or a request you made

Ajeris's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

In practice: data Ajeris receives from Google APIs, and anything derived from it, such as a summary, a memory or a search index, is used only to provide the features you use. It is never used for advertising and never sold. It is not used to develop, improve or train generalized AI or machine-learning models, and it is not used to train any other model either. It is shared only with the providers that run the feature you asked for, such as the AI model provider that writes your reply, which may not train on it. People at Ajeris do not read it unless you ask us to about specific messages, for security, or to comply with the law. We request the narrowest scope that makes each feature work, and only the scopes for features Ajeris offers today.

• ◆gmail.send (sensitive). Used to send email on your behalf when you explicitly ask the agent to, for example "email Maya the deck", or for the meeting recap email. Ajeris cannot read your inbox with this scope; only the narrowest write capability is requested.
• ◆calendar.events (sensitive). Used to read upcoming events so the agent can answer "what's on my calendar tomorrow", to create events when you ask ("block 2-3pm Thursday"), to move or cancel events you identify, and to send Ajeris's note-taker to your meetings at the right time. No access to calendars you have not connected.
• ◆drive.file (non-sensitive, per-file). Used to create Docs, Sheets and other files the agent makes for you. drive.file limits Ajeris to files it creates itself; it cannot list, read or change any other file in your Drive.
• ◆youtube.readonly (sensitive). Used to read your subscriptions and likes when the agent answers questions like "find a recipe video from one of my cooking channels" or "what was that video I liked last week". Read-only; no uploads, edits or comments.
• ◆contacts.readonly (sensitive). Used to look up a person you name, for example "email Maya the menu", so the agent can address the message without asking for the address. Read-only: Ajeris never adds, edits or deletes contacts, and does not store contact details.
• ◆calendar.readonly (sensitive). Used to include every calendar you show in Google Calendar, such as a shared family calendar or a partner's calendar you subscribe to, when answering "am I free Friday". Read-only; creating or changing events still uses calendar.events.
• ◆tasks (sensitive). Used to list, add and complete items on your Google Tasks list when you ask, for example "add milk to my list". Tasks change only on your request.
• ◆documents and spreadsheets (sensitive). Used to read a Google Doc or Sheet you send a link to, and, when you ask, to add text at the end of that Doc or rows at the bottom of that Sheet. Existing text and cells are never changed or deleted. Ajeris does not keep a copy of the file; a reply that quotes it stays in your conversation history.
• ◆presentations.readonly (sensitive). Used to read a Google Slides deck you send a link to, for example "summarize this deck". Read-only.
• ◆gmail.readonly (restricted; requested only after Google's independent security assessment). When you grant it, used to find the confirmation email for a booking or order the agent made for you, to read a verification code a site emailed you, and to answer questions you ask about your inbox. Ajeris does not keep a copy of your inbox; a reply that quotes an email stays in your conversation history. Inbox alerts: off until you turn them on. When they are on, Ajeris checks new Gmail about every 10 minutes (the sender, subject and a short snippet) and reads the full text of only the few messages that look like they need you, so it can tell you about them. It keeps the ids of the messages it checked, a follow-up you can see and close for each thing it tells you about (with a one-line summary), and the alerts it sends you in your conversation history. None of it is used to train models or for advertising. Turning inbox alerts off, or disconnecting Google, deletes the ids and the follow-ups.
• ◆openid, profile, email (standard OpenID Connect). Used to identify which Google account is being connected, so you can connect more than one Google account and the agent can route each request to the right one.

Sign-in tokens: Google access and refresh tokens are encrypted with AES-256 under our own key and decrypted only at the moment a request runs. They are deleted when you disconnect, when you delete your account, and when they expire. To disconnect, text your agent "disconnect Google", visit https://ajeris.com/disconnect, or revoke access at https://myaccount.google.com/permissions. Disconnecting deletes the stored token within 24 hours.

If you connect a Microsoft account, Ajeris uses Microsoft Graph, with your consent, to do what you ask: read, draft and send email; read and change your calendar; work with your files in OneDrive, notes in OneNote, contacts and To Do tasks; and send Teams chat messages.

• ◆Permissions requested: openid, profile, email, offline_access, User.Read, Mail.ReadWrite, Mail.Send, Calendars.ReadWrite, Files.ReadWrite, Notes.ReadWrite, Chat.ReadWrite, ChatMessage.Send, Contacts.ReadWrite and Tasks.ReadWrite.
• ◆What Ajeris stores: the encrypted sign-in tokens, and the account's name and email address. Where the mail index is on for your account, an index of your Outlook mail: sender, recipients, subject, a snippet of about 300 characters and when it arrived, never the full message. The index follows your mailbox, so mail you delete drops out, and anything older than one year is removed. Meetings found on your Outlook calendar are kept with your meetings.
• ◆Inbox alerts: off until you turn them on. When they are on, Ajeris checks new Outlook mail about every 10 minutes (the sender, subject and a short preview) and reads the full text of only the few messages that look like they need you, so it can tell you about them. It keeps the ids of the messages it checked, a follow-up you can see and close for each thing it tells you about (with a one-line summary), and the alerts it sends you in your conversation history. Turning inbox alerts off, or disconnecting Microsoft, deletes the ids and the follow-ups.
• ◆How it is used: only to provide the features you use. Never for advertising and never sold. Microsoft data, and anything derived from it, is never used to improve or train AI models.
• ◆Who else sees it: only the providers that run the feature you asked for, such as the AI model provider that writes your reply.
• ◆Deletion: disconnecting deletes the tokens and the mail index. Deleting that service's data from Preferences deletes the mail index and the meetings found on its calendar. Deleting your account deletes everything.

To revoke Ajeris's access from Microsoft's side, use https://account.live.com/consent/Manage for a personal Microsoft account, or https://myapps.microsoft.com for a work or school account. You can also disconnect it from Preferences on your manage page.

If you connect QuickBooks Online or Xero, Ajeris receives accounting data on your behalf (profit and loss reports, balance sheets, invoices, customer and contact lists, transaction history). Access is granted via OAuth 2.0 with read-only scopes by default; any write capability is behind an explicit feature flag that is off for all users at connection time.

• ◆QuickBooks Online scope: com.intuit.quickbooks.accounting. Ajeris stores your Intuit realmId, company name, and environment marker in a metadata record alongside the encrypted OAuth token.
• ◆Xero scopes: accounting.reports.read, accounting.transactions.read, accounting.contacts.read, openid, profile, email, offline_access. Ajeris stores your Xero tenantId, tenantName, tenantType, and connectionId alongside the encrypted OAuth token.
• ◆Accounting data is fetched when your agent answers a question that needs it. Ajeris does not keep a copy of your books; the reply you receive, which may quote figures, stays in your conversation history.
• ◆Accounting data, and anything derived from it, is never used to train any AI or machine-learning model, ours or anyone else's, and is never used to improve Ajeris. This follows Intuit's and Xero's developer terms.
• ◆Providers that may see accounting data: Anthropic, to write the reply (it does not train on it and deletes it within 30 days, as described above), and Railway, which hosts our servers.
• ◆To disconnect, text your agent "disconnect QuickBooks" or "disconnect Xero", or follow the instructions at https://ajeris.com/disconnect. Disconnection calls the provider's revocation endpoint (Intuit /v2/oauth2/tokens/revoke for QuickBooks, DELETE /connections/{id} for Xero) and deletes the encrypted token from our database within 24 hours.
• ◆Retention: encrypted tokens are kept until you disconnect or your account is deleted. Our service logs record that a request ran, how long it took and any error code, never the figures, and are kept up to 30 days.

If disconnection does not appear to complete, or you want a full export of everything Ajeris held about a QuickBooks or Xero connection before it was deleted, email hi@ajeris.com. We respond within one business day.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. This includes your phone number and any data collected via SMS.

• ◆Phone numbers are used only to deliver messages between you and your agent, and to verify your account
• ◆Messages from your agent are transactional and informational only (agent replies, action confirmations, account notifications), never marketing or promotional
• ◆When you opt in via the web form at ajeris.com/opt-in, we record the submitted phone number, the consent timestamp, your IP address, and your browser user-agent so we can demonstrate a valid opt-in if a carrier or auditor requests proof
• ◆Conversation history (the SMS messages you send your agent and the agent's replies) is kept as set out in How long we keep it, above
• ◆Mobile opt-in consent is never a condition of purchasing any other Ajeris service or accessing any other part of ajeris.com

Text STOP at any time to unsubscribe; you will receive one confirmation message and nothing after that unless you reply START. Text HELP for support information, or email hi@ajeris.com. Message and data rates may apply, per your mobile carrier's plan.

When you open an invite link from a friend (ajeris.com/?ref=CODE), we keep that friend's six-character invite code so they are credited if you start using Ajeris.

• ◆What it is: a first-party cookie named ajeris_ref, set by ajeris.com for ajeris.com and its subdomains. It holds only the friend's invite code, nothing about you
• ◆When it is set: only when you arrive with an invite code in the link. Visiting without one sets nothing, and a later invite never replaces the first
• ◆How long it lasts: 7 days, then your browser deletes it. You can delete it sooner in your browser settings
• ◆The same code is added to the WhatsApp, SMS or Telegram message the page opens for you, so the invite also counts when you start in chat
• ◆It is not used for advertising and not used to track you across other sites; it is sent only to Ajeris
• ◆Separately, this website counts page visits with Vercel Web Analytics without personal data: only the page path is recorded, never the invite code or anything else in the link

When a small business uses Ajeris Business, the platform records information about people who contact the business or fill out a lead form on a page hosted by the business. This data is generated about, and on behalf of, the business and its customers. Ajeris stores and processes it for the business; the business is the controller of its customer relationships.

• ◆Phone number, name, and email when a person provides them on a hosted guide page or supplies them in an inbound message
• ◆The full content of voice calls, SMS, web-chat sessions, and (for businesses that connect Instagram or Messenger) Instagram comments and direct messages exchanged with the business agent
• ◆AI-generated transcripts and summaries of voice calls so the business owner can review past conversations
• ◆Lead-form submission metadata: timestamp, IP address, browser user-agent, the page on which the form was submitted, and the value of the TCPA consent checkbox
• ◆Booking and appointment records the business agent creates with the lead or customer

This data is shared only with the business that owns the customer relationship and the providers listed above that run the service. It is never shared with other businesses on the platform, never used to improve or train AI models, and never sold. The business owner can export, delete, or transfer it at any time. If you are an end customer who messaged or called a business that uses Ajeris and you want a copy or deletion of your data, please contact the business directly. Ajeris will support the business in fulfilling verified requests within 30 days; you may also email hi@ajeris.com to be routed to the business.

Business owners using Ajeris Business may record their own voice to create an AI voice agent that answers calls and sends voice messages on the business's behalf. Voice cloning is provided by ElevenLabs and used only within the owner's own business.

• ◆Voice samples are provided by the business owner and used to train a per-business voice model linked only to that owner's account
• ◆The owner verifies ownership of the voice (selfie video plus a recorded consent statement) before the model is activated
• ◆Voice models are not used to train any general AI or speech model, are not shared with other Ajeris customers, and are not made available outside the owner's account
• ◆Voice models and samples are deleted within 30 days when the owner removes the voice clone from their account or deletes the account

The owner is responsible for using the cloned voice only in compliance with applicable laws (including the Tennessee ELVIS Act and other state right-of-publicity laws) and for never using the platform to clone a voice they do not own or have explicit consent to use.

Business owners using Ajeris Business may connect their Instagram or Facebook Messenger accounts so the platform can answer customer messages and run comment-trigger automations. Ajeris's use of Meta APIs adheres to the Meta Platform Terms and Developer Policies.

• ◆On connection, Ajeris receives the business's Instagram or Facebook account profile (username or page name, account ID, profile picture) and a long-lived OAuth token authorizing the requested actions
• ◆Ajeris listens to webhook events Meta delivers: new comments on the business's posts, new direct messages, message reactions, and message read receipts
• ◆Ajeris sends direct messages and private replies through the Meta Graph API on the business's behalf, only when the business has configured an automation or the AI agent is responding to an inbound message that the customer initiated
• ◆Permissions Ajeris requests via Meta App Review for Instagram: instagram_business_basic, instagram_business_manage_comments, instagram_business_manage_messages, and human_agent (for replies outside Meta's standard 24-hour window). For Messenger: pages_messaging, pages_show_list, and pages_manage_metadata
• ◆Meta platform data is used solely to operate the connected business's Ajeris account, never used to improve or train AI models, never shared with other businesses on the platform, and never sold
• ◆Retention: archived Instagram and Messenger conversation data is retained for as long as the business's account is active or as required by the business's industry rules, then deleted

A business owner can disconnect their Instagram or Messenger account at any time from the Ajeris manage interface, from https://www.instagram.com/accounts/manage_access/ for Instagram, or from Facebook Business Settings for Messenger. Disconnection revokes the OAuth token, ends webhook delivery, and triggers deletion of stored Meta-platform data within 30 days.

Deleting your account deletes your messages, memories, reminders, files, vault, connections, health logs, meetings and location history from our database. It cannot be undone.

• ◆Personal Agent users: open Preferences on your manage page and choose Delete account, or tell your agent "delete my account" and it sends you the link to that page. You type your agent's name and confirm a second time; your agent never deletes your account on its own. As soon as you confirm, we delete your data from our database, revoke your connections at the provider where possible, delete your Stripe customer record and your hosted-browser profile, and have Recall.ai and Anthropic delete the copies they hold, within about 5 minutes and retried until each confirms. Copies in our database backups expire within 90 days. What other providers keep, and for how long, is listed in How long we keep it
• ◆Ajeris Business owners: an account that owns a business cannot be deleted until the business is closed or handed over. Email hi@ajeris.com and we will close or transfer the business with you; then delete your account from Preferences
• ◆End customers of an Ajeris Business: contact the business owner directly. The business is the controller of its customer relationships; Ajeris will support the business in fulfilling verified deletion requests within 30 days of the business's instruction
• ◆Meta (WhatsApp, Instagram, Messenger): when you remove Ajeris from your Meta account and ask for your data to be deleted, Meta calls our data-deletion callback at https://gateway.ajeris.com/webhooks/meta/data-deletion. If you used Ajeris on WhatsApp, we delete everything you sent or received there, or your whole Ajeris account if WhatsApp was the only way you used it. If you connected an Instagram account, we remove that connection and its conversations. Meta gives you a link to a status page that shows what was deleted

Questions about a deletion request: email hi@ajeris.com and include the reference from the status page if you have one.

Ajeris is not intended for anyone under 13. We do not knowingly collect data from children, and if we learn we have, we delete it. Conversations of anyone we know to be under 18 are never used to improve Ajeris.

If we materially change how we handle data, we will notify you via SMS and email before the change takes effect, and give you a grace period to decline and delete your account. The dates at the top of this page show when this policy takes effect and when it was last updated. To see an earlier version, email hi@ajeris.com.

Questions about this policy or your data? Email us at hi@ajeris.com.