ImiLai, LLC
Privacy policy
How ImiLai handles merchant and customer data, and content used by the sales agent and creative studios.
Revision: 2026-09-07
Who we are and scope
ImiLai, LLC operates a conversational-commerce SaaS platform for North Africa. This policy covers the website, merchant accounts, messages, orders, and content processed through the platform. ImiLai determines how account and service-operation data is used. Store customer data is processed to provide the service under the merchant’s settings and lawful instructions. Merchants remain responsible for customer notices and a lawful basis for collecting their customers’ data.
Data we process
Data may include merchant identity, email, account and billing details; connected channel and page identifiers; customer messages, names, phone numbers, delivery addresses and order details; product prices, inventory, benefits, materials, origin and policies; uploaded or generated images, video, audio and text; and usage, error, operation and cost records. The scope depends on the tools, channels and connection permissions you use.
Processing purposes
We use data to operate accounts and stores, understand conversations, retrieve product knowledge, analyze requested ad or video content and link it to products, prepare responses and orders, hand cases to staff, track delivery with payment on delivery, generate requested content, record usage charges, provide support and protect the service. A model inference about customer motivation is not an established fact. Depending on the processing and applicable law, the basis may be a contract, legal obligation, legitimate interest balanced against rights, or consent where required.
Content and AI processing
An AI feature may send relevant inputs to a model provider to fulfill a request, including conversation text, product information or media files. Providers vary by tool and configuration. This policy does not grant a general license to publish customer conversations or train a general-purpose model on them. The relevant provider’s processing and retention terms also apply. Avoid unnecessary sensitive data and obtain the necessary rights for images and voices.
Service providers and sharing
The platform uses hosting, database, storage and AI services, including Supabase, Cloudflare, Google Cloud, Microsoft Azure, Amazon Web Services and BytePlus depending on the feature. Connected channels exchange data needed for connections and messages; store staff access data according to their permissions. Disclosure may be necessary for legal obligations, service protection, or a business transfer subject to applicable safeguards. We do not sell customers’ personal data.
Cross-border processing
Data may be processed outside the merchant’s or customer’s country, depending on hosting and model service locations. We do not promise that all data resides in one North African country. Transfers remain subject to applicable legal requirements and safeguards. Contact us about the services involved before submitting data subject to special transfer restrictions.
Retention and security
Retention depends on service needs, merchant instructions, disputes, financial records and legal obligations. Periods vary by data type and service; restricted records or backups may remain as needed for a legitimate purpose. We use authentication, access permissions, store-data isolation and protected communications. These measures are not a guarantee of absolute security or unlimited backups.
Browser storage
The platform uses local browser storage for login sessions, language and theme preferences. Clearing it may sign you out or reset preferences. External services you open or connect may use their own technologies under their policies. Nonessential tracking is subject to applicable consent requirements; visiting the site is not blanket consent to all data uses.
Your rights and requests
Depending on applicable law, you may have rights to access, correction, deletion, restriction, objection, portability, withdrawal of consent and a complaint to the relevant authority. Start from the data-deletion page or the separate contact page. We may request limited information to verify identity and authority. We handle requests within applicable legal timeframes and explain any exceptions. For a purchase from a store, also contact the responsible merchant.
Children and updates
Merchant accounts are for adults authorized to conduct business, not a service directed at children. Use the contact page if a child’s data has been submitted without an appropriate basis. Material changes to practices will be reflected here with appropriate notice and renewed consent where legally required. Official contact details are kept only on the contact page.