Privacy Policy

1. Scope and who we are

Dahn Jay Tech (“DJT,” “we,” “us,” or “our”) provides managed cloud, AI workforce, Microsoft 365, payroll, communications, training, and related business services. Our website also contains public information, forms, account registration, and customer portals.

When we process information for a business customer’s instructions—for example, employee payroll records, customer contacts, or business knowledge—we generally act as a service provider or processor. The customer remains responsible for determining the purposes and lawful basis for that processing. When we determine the purpose of processing ourselves, such as account security, billing, or website analytics, we act as the controller or business responsible for that processing.

2. Information we collect

Depending on how you interact with us, we may collect:

• Account and identity data: name, work email, phone number, job title, organization, login identifiers, profile details, and authentication or security records.
• Business setup and payroll data: business registration details, tax identifiers, employee information, compensation and attendance data, statutory information, payment preferences, and other data a customer chooses to enter.
• Connected-service data: information made available through services a customer elects to connect, such as Microsoft 365, Gmail, WhatsApp Business, M-Pesa, Stripe, or other integrations. The permissions and data available depend on that service and the customer’s configuration.
• Content and communications: prompts, files, documents, messages, support requests, course activity, agent instructions, and other content submitted to the platform.
• Transaction data: subscription, purchase, invoice, tax, and limited payment-status information. Full card details are handled by payment processors rather than stored by DJT.
• Device and usage data: IP address, browser and device type, approximate location derived from IP, pages viewed, actions, timestamps, referring pages, crash information, and security events.
• Information from others: business customers, administrators, colleagues, payment providers, identity providers, or public sources may provide information about you.

We ask users not to submit unnecessary sensitive personal information. If a customer needs to process sensitive data, the customer is responsible for confirming that it has an appropriate legal basis and for configuring the service appropriately.

3. How we use information

We use information to:

• provide, maintain, personalize, and improve the platform and services;
• create and secure accounts, authenticate users, prevent fraud, and enforce access controls;
• process payroll, business operations, connected integrations, purchases, subscriptions, and support requests at a customer’s direction;
• send service notices, security alerts, billing messages, and administrative communications;
• respond to questions, provide training and customer support, and improve documentation;
• understand usage, diagnose errors, test features, and develop safer and more useful products;
• send marketing communications where permitted by law, with an unsubscribe option;
• comply with law, protect rights and safety, investigate misuse, and establish or defend legal claims.

We do not sell personal information for money. We do not use customer content to train a general-purpose AI model without authorization or a separate agreement.

4. AI and automated features

DJT may provide AI employees, assistants, search, drafting, classification, workflow, and other automated features. These features may process the content and instructions supplied by a customer to produce an output or perform an authorized action.

AI output can be inaccurate, incomplete, biased, or unsuitable for a particular decision. Customers must review outputs before relying on them, especially for employment, payroll, legal, financial, health, or other high-impact decisions. Customers control the instructions, connected services, and approval settings for their AI workforce and remain responsible for actions taken through their accounts.

5. How we share information

We may share information with:

• Service providers: hosting, databases, authentication, analytics, email, communications, AI, video, customer support, security, and payment providers that process information under our instructions.
• Connected services: only when a customer or user authorizes an integration or requests an action that requires it. Those providers process data under their own terms and policies.
• Business administrators: people authorized by the relevant organization may access account, employee, payroll, integration, or usage information according to that organization’s settings.
• Corporate transactions: information may transfer in connection with a merger, acquisition, financing, reorganization, or sale of assets.
• Legal and safety recipients: courts, regulators, law enforcement, professional advisers, or other parties when reasonably necessary to comply with law or protect people, systems, or rights.

We require appropriate confidentiality and security measures from vendors where applicable. We do not permit vendors to use customer content for unrelated advertising.

6. Payments and financial data

Payments and financial connections may be provided through third-party services such as Stripe or M-Pesa. Payment credentials, card numbers, bank credentials, and tokens are handled according to the provider’s flow and security controls. DJT generally receives only the information needed to confirm a transaction, display account status, reconcile services, or provide payroll functionality.

DJT is a software and services provider. Unless a separate written arrangement says otherwise, DJT does not own customer funds, act as a bank, or control a customer’s connected payment account. Customers are responsible for reviewing provider permissions and approving transfers or payroll actions.

7. Cookies and similar technologies

We use cookies, local storage, and similar technologies to keep users signed in, remember preferences, maintain security, measure performance, and understand how public pages are used. Some providers may set their own cookies or collect device information when their widgets are loaded, such as payment, authentication, video, or bot-protection tools.

You can control cookies through your browser settings. Blocking essential cookies may prevent sign-in or core features from working. Where required, we will request consent for non-essential technologies.

8. Retention and deletion

We retain information for as long as needed to provide the service, maintain legitimate business records, resolve disputes, enforce agreements, comply with legal or financial obligations, and protect security. Retention periods vary by the type of information and the customer’s instructions.

Business customers may request deletion or return of their customer-controlled content, subject to applicable law, backups, fraud prevention, dispute resolution, and records we must retain. Deleting an account may not delete information held by a connected provider or by the organization that invited you.

9. Security

We use administrative, technical, and physical safeguards designed to protect information, including access controls, authentication, encryption in transit, least-privilege practices, logging, monitoring, backups, and vendor review. Some data, such as tax identifiers and integration credentials, may receive additional protection.

No online service is completely secure. Please use a unique password, enable available multifactor authentication, limit integration permissions, and notify us promptly if you suspect unauthorized access.

10. Your choices and rights

Depending on where you live and the role in which we process your information, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information, and to withdraw consent where processing is based on consent. You may also opt out of marketing by using the unsubscribe link or contacting us.

To make a request, email privacy@dahnjay.tech from the address associated with your account and describe the request. We may verify your identity and may need to refer a request to the relevant business customer when we process data on that customer’s behalf. You may have the right to complain to your local data-protection authority.

We do not discriminate against people for exercising applicable privacy rights. Some features may be unavailable after a deletion or access restriction request.

11. International transfers

DJT and its service providers may process information in countries other than where you live. Where required, we use appropriate safeguards for cross-border transfers, which may include contractual protections, adequacy decisions, or other lawful mechanisms.

12. Children’s privacy

The services are intended for businesses and are not directed to children under 13, or the higher age required by local law. We do not knowingly collect children’s information for advertising. If you believe a child provided information to us, contact us so we can investigate and remove it where appropriate.

13. Changes to this policy

We may update this policy as our services, legal obligations, or privacy practices change. We will post the updated version here and change the effective date. If a change is material, we may provide additional notice through the service or by email where appropriate.

14. Contact us

Questions, requests, or concerns about privacy can be sent to:

For general support, visit our contact page.