1. Who we are
Doni is a WhatsApp-based assistant for small businesses and professionals in Nigeria, built and operated by Sizhen Chen, Lagos, Nigeria ("we", "us"). Contact: wa.me/2349153264893 or the feedback form on getdoni.com/about.
2. What we collect
- Messages you send to Doni on WhatsApp or on this website: text, photos, voice notes, documents and the replies we send back. We keep a history so that Doni can remember your tasks, reminders and preferences.
- Your WhatsApp number (or a random browser id for guests on this site). We do not read your other chats, groups or contacts. WhatsApp only delivers to us the messages you address to Doni's number.
- Files Doni makes for you (posters, videos, documents) are kept for 30 days so you can find them again, then deleted.
- Usage and cost logs: which features you used and roughly how much they cost us to run, so we can keep the free tier honest. No advertising trackers on this site.
3. If you connect Google (Gmail and Calendar)
This is optional. It happens only when you say "connect gmail" (or similar) to Doni and then sign in and approve on Google's own page. Doni asks for these permissions:
gmail.readonly— to list your unread mail and read a message when you ask for it.gmail.send— to send an email only after you have seen the draft in WhatsApp and replied "send".calendar.events— to show your day, turn upcoming events into reminders, and add an event when you ask.userinfo.email— to show you which account is connected.
How we handle Google data:
- Doni reads your mailbox and calendar only in response to your request or for the two things you opted into: the morning brief line ("3 unread, 2 events today") and reminders for events in the next 48 hours.
- Email content is processed in memory to produce the summary you asked for and is not stored. We keep only the sender, subject and message id of the last list for 30 minutes so that "read 2" and "reply 2" work.
- Your Google refresh token is stored encrypted (AES-256-GCM) on our server. Access tokens live in memory only.
- Where an AI model is used to summarise or draft, only the text needed for that single request is sent to the model provider and nothing is kept by us afterwards. The provider's own API terms apply to that request.
- Doni never deletes emails or calendar events on its own, never reads mail you did not ask about, and never sends without your explicit "send".
- Say "disconnect google" at any time: we revoke the token with Google and delete it from our server immediately. You can also remove Doni at myaccount.google.com/permissions.
Google API Services User Data Policy. Doni's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Google user data is used only to provide the features you asked for, is not transferred to third parties except as needed to provide those features (for example, the AI model that writes a summary), is never used for advertising, and is never read by a human except with your permission, for security purposes, or where required by law.
4. Who else sees your data
- Meta / WhatsApp carries your messages to and from Doni under WhatsApp's own terms.
- AI model providers (for text, images, video and speech) receive only the specific content needed for a request. We use several providers and route by task; each provider's API terms apply to what it receives.
- Hosting: our server is at Vultr and is accessible only to the operator.
- We do not sell personal data and we do not share it with advertisers or data brokers.
5. How long we keep things
- Chat history and tasks: while your account is active. Ask Doni (or use the feedback form) to delete your data and we erase your history, tasks, connected accounts and files within 7 days.
- Generated files: 30 days.
- Google tokens: until you disconnect or delete your data.
6. Your rights
You can ask us at any time to see what we hold about you, correct it, or delete it. Message Doni or use the feedback form. Nigerian users are covered by the Nigeria Data Protection Act 2023; we honour those rights for everyone.
7. Children
Doni is a business tool for adults (18+). We do not knowingly collect data from children.
8. Changes
If this policy changes in a way that matters, Doni will tell you in the chat before the change applies. The date at the top is always the current version.