Privacy Policy

Last updated: 1 November 2026

DMJar is a messaging assistant for businesses. It answers a business's customers on Facebook Messenger, Instagram, WhatsApp and website chat, and turns those conversations into orders and bookings. DMJar is a product of Realbrain Technologies (legal name MD. Shariful Islam), Chittagong, Bangladesh. Contact: contact@dmjar.com.

There are two roles here. For the people who run a business on DMJar, we decide how their account data is used. For that business's customers, the business decides, and we process the messages on its behalf.

What we collect

From businesses and their staff

• Name, email address, role, and the times you sign in.
• Business details: name, type, country, currency, languages, policies, delivery areas and payment numbers.
• The catalogue you add, including prices and photos.
• A record of team actions, such as who changed an order.

From a business's customers

• The messages, photos, voice notes and videos sent to the business.
• The name and profile photo the channel provides, and the channel's ID for the person.
• Details given in the chat to complete an order: phone number, address, order contents and payment reference.
• Preferences the assistant notes to serve a repeat customer, such as a usual order.

Data from Meta

When a business connects a Facebook Page, an Instagram professional account or a WhatsApp Business account, Meta gives us the account's name and ID, an access token, and the messages sent to that account with the sender's ID and profile name. For Messenger and Instagram we also read the sender's profile photo.

We use this data only to:

• receive customers' messages and send the business's replies;
• show the conversation to the business in its inbox;
• let the business choose which account to connect.

We do not sell this data, do not use it for advertising, and do not share it with data brokers. We do not use it to train AI models. Access tokens are stored encrypted or as server secrets, and are never shown in the product.

Why we use it

• To run the service for the business: answer customers, take orders, and alert staff.
• To keep it secure and working: sign-in codes, abuse prevention and fault finding.
• To measure usage and cost per business. These records hold counts, not message text.

Replies are written by an AI model, which is told to answer only from that business's catalogue and policies. Voice notes and videos go to a person rather than the model. Customers can ask for a person, and staff can take over any chat. Prices and order totals are calculated by our software, not by the model.

Who processes it for us

• Cloudflare: hosting, storage and email sending.
• Anthropic: the AI model that writes replies and reads photos. It receives the conversation and the business's catalogue under commercial terms that do not allow training on this data.
• Meta: delivers messages on Messenger, Instagram and WhatsApp.
• Telegram: only when a business turns on Telegram alerts for its staff.

A business may also send order details to its own webhook, or read its catalogue from its own sheet or store. Those are its own choices and its own systems. These providers may process data outside your country, including in the United States.

How long we keep it

• Conversations, orders and customer details: until the business deletes them, closes its account, or a person asks us to delete them.
• A customer's cached profile name and photo: up to 30 days after last being read.
• The record of team actions: about 90 days. Older entries are removed as new ones are written.
• Usage counts: up to 90 days.
• Server logs: a few days, and they hold conversation IDs rather than message text.

Your choices and rights

• You can ask for a copy of your data, a correction, or its deletion.
• A customer can ask the business, or us, to delete their data. See Data deletion.
• A business can disconnect a channel at any time by removing DMJar in its Facebook or WhatsApp business settings.

Write to contact@dmjar.com. We answer within 30 days. If you are in a place with data protection law, such as the EU or UK, you can also complain to your local regulator.

Children

DMJar is for businesses and is not meant for anyone under 13.

Changes

We change the date above when we update this page, and we email businesses about significant changes.