Introduction and Scope

Enterprise Agents Directory ("EA directory," "we," "us," or "our"), incubated by Ujiajiri Enterprises Limited, respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI automation services, including AI chatbots, workflow automation, and custom AI solutions.

Information We Collect

2.1 Information You Provide Directly

2.2 Information We Collect Automatically

How We Use Your Information

3.1 Primary Service Purposes

We use your information to:

• Service Delivery: Operate your AI chatbots, execute workflow automations, and provide custom AI solutions
• Account Management: Create and maintain your account, process authentication, and manage service access
• Customer Support: Respond to inquiries, troubleshoot issues, and provide technical assistance
• Billing & Payment: Process payments, generate invoices, and manage subscription services

3.2 Service Improvement & Communication

• Performance Optimization: Analyze service usage to improve system performance and reliability
• Feature Development: Understand user needs to develop new features and capabilities
• Service Communications: Send important updates, maintenance notices, and service-related information
• Legal Compliance: Meet regulatory requirements and fulfill legal obligations

Information Sharing and Disclosure

4.1 Essential Service Providers

We share information with trusted third-party service providers who assist in delivering our services:

Service Provider Obligations: All service providers are contractually bound to use your information only for providing services to us and must maintain appropriate security measures.

4.2 Legal and Regulatory Disclosure

We may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, or regulatory requirements
• Respond to valid requests from law enforcement or government authorities
• Protect our rights, property, or safety, or that of our users or the public
• Enforce our Terms of Service or other legal agreements

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections outlined in this policy.

Data Security and Protection

5.1 Technical Security Measures

5.2 Operational Security

• Staff Training: Regular security awareness training for all team members
• Access Limitations: Strict need-to-know access to customer data
• Security Audits: Regular internal and external security assessments
• Incident Response: Comprehensive procedures for security incident management

Data Retention and Deletion

6.1 Retention Periods

Data Type	Retention Period	Purpose
Account Information	Duration of active account + 60 days	Service provision and support
Service Content & Configurations	Until account termination + 30 days	Service delivery and data export
Chatbot Conversation Logs	12 months maximum	Service optimization and support
Workflow Execution Logs	24 months maximum	Performance monitoring and troubleshooting
Billing & Payment Records	7 years	Legal and tax compliance requirements
Support Communications	3 years maximum	Customer support and service improvement

6.2 Data Deletion Process

Upon account termination or data deletion request:

1. 30-Day Grace Period: Data export available for 30 days after termination
2. Production Deletion: Active systems purged within 30 days
3. Backup Deletion: Backup systems purged within 60 days
4. Archive Deletion: Long-term archives purged within 90 days
5. Legal Exceptions: Data retained only as required by applicable law

Deletion Verification: Written confirmation of complete data deletion available upon request.

Your Privacy Rights

7.1 Individual Rights Under Data Protection Laws

7.2 Exercising Your Rights

To exercise any of these rights:

• Email: Send requests to privacy@eadirectory.com
• Verification: We may require identity verification to process requests
• Response Time: We will respond within 30 days of receiving valid requests
• No Cost: Most requests are processed free of charge

International Data Transfers

8.1 Data Processing Locations

Our primary data processing occurs in Kenya. However, your information may be transferred to and processed in other countries where our service providers operate, including:

• United States: AI processing (Anthropic, OpenAI)
• European Union: Cloud hosting and backup services
• Other Jurisdictions: As required for specific integrations or services

8.2 International Transfer Safeguards

When transferring data internationally, we ensure appropriate safeguards through:

• Contractual data protection clauses with service providers
• Adherence to international data protection frameworks
• Regular assessment of destination country data protection laws
• Implementation of additional security measures where necessary

Children's Privacy

Our services are designed for businesses and adults. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

If you believe we have collected information from a child under 18, please contact us immediately at privacy@eadirectory.com.

Regulatory Compliance

10.1 Kenya Data Protection Act (2019)

We comply fully with the Kenya Data Protection Act, including:

• Lawful Processing: All data processing based on legitimate legal grounds
• Data Subject Rights: Full support for individual privacy rights
• Data Controller Registration: Appropriate registration when required
• Breach Notification: Prompt reporting of data protection incidents

10.2 GDPR Compliance (EU Users)

For users in the European Union, we provide additional protections under GDPR:

• Legal Basis: Clear legal basis for all processing activities
• Enhanced Rights: Full range of GDPR individual rights
• Data Protection Officer: Designated contact for GDPR matters
• Privacy by Design: Privacy considerations integrated into service development

10.3 Other Applicable Laws

We also comply with relevant data protection laws in jurisdictions where we operate or have users, adapting our practices as necessary to meet local requirements.

AI-Specific Privacy Practices

11.1 AI Data Processing

11.2 Third-Party AI Services

When using third-party AI providers (Anthropic, OpenAI):

• Data is transmitted securely and processed according to their privacy policies
• We maintain data processing agreements with all AI service providers
• Your data is not used by these providers to train their general models
• We regularly review and audit third-party AI service privacy practices

Cookies and Tracking Technologies

12.1 Our Cookie Policy

We use minimal tracking technologies on our website:

12.2 What We Don't Use

You can control cookies through your browser settings, though disabling essential cookies may affect service functionality.

Privacy Policy Updates

13.1 Change Notification Process

We may update this Privacy Policy periodically to reflect:

• Changes in our services or business practices
• Updates to applicable laws and regulations
• Improvements in privacy protection measures
• User feedback and privacy best practices

13.2 How We Notify You

• Significant Changes: 30 days advance notice via email and prominent website notice
• Minor Updates: Updated policy posted on website with revision date
• Continued Use: Using our services after changes indicates acceptance
• Termination Right: Right to terminate services if you disagree with changes

Data Protection Officer

For privacy-related inquiries, complaints, or to exercise your data protection rights, you can contact our Data Protection Officer:

Complaints and Enforcement

15.1 Internal Complaint Process

If you have concerns about our privacy practices:

1. Direct Contact: Email privacy@eadirectory.com with your concern
2. Investigation: We will investigate and respond within 30 days
3. Resolution: We will work with you to address legitimate concerns
4. Escalation: Unresolved issues can be escalated to management

15.2 Regulatory Complaints

You also have the right to lodge complaints with relevant data protection authorities:

• Kenya: Office of the Data Protection Commissioner
• EU Users: Your local data protection authority
• Other Jurisdictions: Relevant privacy regulators in your country