01Who we are and what this covers
Digiassist AI is operated by Global Digital Prime, Inc. We are the data controller for the personal information described here, and this policy covers digiassistai.com, the member portal and every tool inside it.
Two different roles matter throughout this document, and it is worth being clear about them up front:
- Your own information — the account you hold with us. We decide how that is handled, and this policy explains it.
- Your customers' information — the contacts, bookings, invoices, chat transcripts and staff records you put into the tools. There, you are the controller and we process it on your instructions, under our Terms of Service. You are responsible for having a lawful basis to hold it and for answering your own customers' requests.
02What we collect
Information you give us
- Account — name, email address, phone number, country and region, password (stored only as a cryptographic hash), profile photo, preferred language.
- Business profile — business name, logo, colours, address and other details you add so the tools can brand your work.
- Content — everything you create or upload: contacts, invoices, bookings, products, websites, chatbot knowledge, campaigns, expenses, staff records, files and images.
- Identity verification — where you request a payout, a government-issued ID document and a selfie or photo of the document. These are held in private storage, visible only to you and to the staff who review verifications.
- Payout details — mobile money number or bank account details, used only to pay you.
- AI coaching sessions — the audio and, on video sessions, video of the session; the transcript; the summary and score we generate from it. Screens you deliberately share during a session are analysed live and are not stored as a recording.
- Support messages — anything you send us by email or through the in-app assistant.
Information we collect automatically
- Technical — IP address, browser and device type, pages visited, timestamps and error logs, used to run the service and to spot abuse.
- Usage — which tools you use and how much of your monthly allowance you have consumed, so we can apply plan limits and show you your usage.
- Referral — the referral link or coupon code you arrived through, so commission goes to the right affiliate.
We do not buy personal information from data brokers, and we do not sell yours.
03Why we hold it, and on what basis
| Purpose | Lawful basis |
|---|---|
| Providing the platform and the tools you asked for | Performance of our contract with you |
| Taking payment, issuing receipts, paying commission | Performance of our contract; legal obligation for tax records |
| Verifying identity before a payout | Legal obligation and our legitimate interest in preventing fraud |
| Service email and SMS — receipts, reminders, session recaps, security alerts | Performance of our contract |
| Marketing email about new features and offers | Consent, which you can withdraw at any time |
| Security, abuse prevention, debugging and improving the product | Our legitimate interest in a safe, working service |
| Meeting legal, tax and regulatory obligations | Legal obligation |
Where we rely on legitimate interests, we have weighed them against your rights and consider the processing proportionate. You can object — see Your rights.
05Your data is never used to train AI
This deserves its own section, because it is the question business owners ask most.
We do not use your content to train AI models — ours or anyone else's. Your customer lists, invoices, chatbot conversations, coaching sessions, designs, brand kits, uploaded documents and everything else you create on Digiassist AI are your business records. They are used for exactly one purpose: operating the features you asked for.
When an AI feature runs, your prompt and the content it needs are sent to the model provider (see the processor table above) through their commercial APIs, under terms that prohibit using that content to train their models. This is the same arrangement serious software companies worldwide rely on. Specifically:
- No training — content sent through these commercial APIs is not used to improve the providers' public models.
- No advertising — we never sell your information or share it with advertisers, and neither may our processors.
- Short provider retention — AI providers may hold requests briefly for abuse monitoring under their API terms, then delete them; they do not keep your content to build products from it.
If this ever changes — for example an optional feature that improves with your permission — it will be exactly that: optional, off by default, and asked for in plain language. Never buried in an update to this page.
06Keeping each business's data separate and secure
Many businesses run on Digiassist AI side by side. The platform is built so that each account's data is strictly its own:
- Account isolation — every record you create is tied to your account, and database-level security rules (row-level security) mean one member's account can never read another's data. This isolation is enforced by the database itself, not just by the app's code.
- Workspace separation — if you manage separate workspaces or brands, each one's content is scoped apart, so client work never bleeds between them.
- No cross-customer AI context — an AI feature working for your account sees your content only. Your data is never used to answer another customer's prompt, and theirs is never used for yours.
- Encryption — data is encrypted in transit (TLS) and at rest with our infrastructure providers.
- Limited staff access — our team accesses account data only to provide support you have asked for, investigate abuse, or meet a legal obligation — never for curiosity or marketing.
- Payment details — card and mobile-money details are held by the payment providers (Stripe, Paystack), never on our servers.
If you believe you have found a security issue, email support@digiassistai.com with the subject “Security” — reports go to the top of the queue.
07Where your information is held
Digiassist AI serves members in Ghana, Nigeria, Kenya and internationally, and our providers operate globally. Your information is therefore stored and processed outside your own country, including in the United States and the European Union.
Where information moves out of a region with data-transfer rules, we rely on the protections our providers have in place for that transfer — standard contractual clauses or an equivalent approved mechanism.
08How long we keep it
- While your account is open — we keep your account and content so the tools work. Nothing is deleted just because a trial or subscription lapsed; your data waits for you.
- After you close your account — content is deleted within 90 days, except where we must keep it for the reasons below.
- Financial records — orders, payments, commission and payout records are kept for at least 7 years to satisfy tax and accounting obligations.
- Identity verification documents — kept for as long as anti-fraud and financial record-keeping rules require, then deleted.
- Coaching recordings and transcripts — kept so you can revisit a session. You can delete a session from your history at any time.
- Backups — deleted data can persist in encrypted backups for a limited period before those backups roll over.
09How we protect it
- Traffic is encrypted in transit (HTTPS) and data is encrypted at rest.
- Database access is enforced row by row, so one member's queries cannot reach another member's data.
- Identity documents sit in private storage that is not publicly reachable and is scoped to the member who uploaded it.
- Passwords are hashed, never stored in readable form, and never visible to our staff.
- Two-factor authentication is available in your security settings — please turn it on.
- Staff access to member data is limited to those who need it and is logged.
No system is perfectly secure. If a breach ever affects your personal information, we will notify you and the relevant regulator without undue delay, and tell you plainly what happened and what to do.
10Your rights
Depending on where you live, you have the right to:
- get a copy of the personal information we hold about you;
- have inaccurate information corrected — most of it you can edit yourself in settings;
- have your information deleted, subject to the retention rules above;
- receive your information in a portable format;
- object to, or ask us to restrict, processing based on legitimate interests;
- withdraw consent for marketing at any time, without affecting anything done before;
- complain to your local data protection authority.
To exercise any of these, email info@digiassistai.com from the address on your account. We respond within 30 days. We will not charge you, and we will never treat you differently for asking.
If your request concerns data held by a Digiassist member about you — for example, you are a customer of a business that uses our tools — please contact that business directly. They control that record; we only host it for them, and we will help them action your request.
12Children
Digiassist AI is for adults running a business and is not directed at anyone under 18. We do not knowingly collect information from children. If you believe a child has given us personal information, write to info@digiassistai.com and we will delete it.
13Changes to this policy
We update this policy when the platform changes — a new provider, a new feature, a new legal requirement. The date at the top always shows the current version. When a change materially affects how we handle your information, we email the address on your account before it takes effect.
14How to reach us
Digiassist AI is operated by Global Digital Prime, Inc., a corporation registered in the State of Delaware, United States, at 1111B S Governors Ave STE 99244, Dover, DE 19904, United States.
- General and legal enquiries — info@digiassistai.com
- Technical support — support@digiassistai.com
- Billing, refunds and payouts — accounts@digiassistai.com
We aim to answer every message within two business days. If your question is about your own data, write from the email address on your account so we can identify you without asking for more personal information than we need.