Privacy Policy
Effective May 23, 2026
Njuru, Inc. ("Njuru", "we") cares about your privacy. This Policy explains what we collect, why, and your rights.
1. What we collect
Account information including name, email, phone, password hash, and optionally avatar and address. Profile preferences such as preferred locale, categories, and quiet hours. Verification data including government ID images and selfie samples submitted to identity vendors, plus business registration documents.
Commerce data including orders, payments, shipping addresses, returns, reviews, wishlists, and saved searches. Payment card details are collected and stored by Stripe; we receive only tokens and metadata.
Usage data including device, browser, IP address, pages visited, and interactions necessary to operate and secure the Services.
AI Personal Concierge data including the memories you ask Njuru to remember and the conversations you have with the Concierge. These are stored privately to your account; we do not share them across users.
2. Why we collect it
To run the marketplace, process payments, verify identity for trust and safety, prevent fraud, deliver products, comply with tax and accounting laws, personalize the experience, send transactional and marketing communications (where you opt in), and improve the Services.
3. Who we share data with
We share data only with vendors we need to run the Services. Each is contractually required to protect your data:
- Stripe for payments, Connect payouts, Identity verification
- Supabase for database, auth, file storage
- Anthropic for AI assistant requests
- Twilio for SMS one-time codes and notifications
- Resend for transactional and marketing email
- Google Maps for address geocoding and map display
- Checkr (when enabled) for background checks
- Wren or Patch for carbon offset purchases
We do not sell personal information.
4. AI processing notice
Conversations with the AI Personal Concierge and content you submit to AI features (listing drafts, product questions) are sent to Anthropic under their commercial API terms. Anthropic does not train models on your data. Concierge memories are stored in your Njuru account and used only to personalize your experience.
5. Identity verification notice
When you start the ID check, your government-issued ID image and selfie are transmitted to Stripe Identity. Stripe runs document authenticity, face match, and liveness checks. Stripe retains this data per its retention schedule, which Njuru cannot extend or shorten. We store only the verification status, expiry, and a small set of verified outputs (name, date of birth, address fields).
6. Your rights
You may:
- Access and download the data we hold about you
- Correct inaccurate information
- Delete your account and most associated data at /account/security
- Object to marketing communications
- Request a copy of data in machine-readable form
- Lodge a complaint with your local data protection authority
To exercise these rights, email privacy@njuru.com. We respond within 30 days.
For California residents (CCPA / CPRA): you have the right to know, delete, correct, and opt out of any sale or sharing of personal information. We do not sell personal information.
For EEA / UK residents (GDPR / UK-GDPR): legal bases for processing include contract performance (your account and orders), legitimate interests (security, fraud prevention, product improvement), legal obligations (tax, dispute resolution), and consent (marketing, optional cookies).
7. Children
The Services are not intended for users under 18. If we learn we have collected data from a child, we will delete it promptly.
8. Security
We protect data with encryption in transit (TLS) and at rest, with role-based access controls, audit logging, multi-factor authentication for staff, and a strict data minimization policy. Verification documents are stored in a private encrypted bucket accessible only to verifiers and admins. No system is perfectly secure; we will notify affected users without undue delay if a material breach occurs.
9. Retention
We keep account data while your account is active and for a reasonable period after closure to satisfy legal and tax obligations (generally 7 years for transactional records). Verification documents are deleted 90 days after a successful verification. AI Concierge memories are kept until you delete them at /account/concierge.
10. International transfers
Data is processed and stored primarily in the United States. Where required, we rely on Standard Contractual Clauses for transfers from the EEA and UK.
11. Cookies and similar technologies
See our Cookie Policy.
12. Changes
We will email registered users about material changes and post the new effective date here.
13. Contact
privacy@njuru.com