Junto privacy policy
Last updated: 2026-10-09
Junto gives businesses an AI assistant that answers their customers on WhatsApp and Instagram, takes bookings and orders, and sends reminders. Junto is operated by Sabu Labs LLC, a Wyoming limited liability company. This policy explains what personal data we process and why.
1. Who is responsible
Business owners and their teams (account, email, WhatsApp number, billing): Sabu Labs LLC is the controller.
Each business's customers (messages, name, number, bookings, orders): the business is the controller and we process the data on its behalf as a processor, under our Data Processing Agreement. Each business has its own privacy page at https://junto.sabulabs.com/privacy/<business>; questions about that data are best sent to the business first.
2. What data we process
- WhatsApp number or Instagram account, profile name and the messages exchanged with the assistant (text, voice notes, photos, videos and documents sent).
- Bookings, orders, quotes and payment status (amount, method, reference, and receipts customers send as proof). Card and bank details stay with the payment provider.
- Names from the business's own saved contacts, when the business connects its WhatsApp Business app.
- Owners' and team members' account data: name, email, phone, business details, login and security data, and billing details.
- Technical data: access and error logs, kept for security and to keep the service running.
3. Why we use it
To answer messages and manage bookings and orders on the business's behalf; send confirmations, reminders and receipts; alert the business owner; provide the dashboard; bill subscriptions; keep the service secure; and improve it. We do not sell personal data or use it for advertising.
4. Who we share it with
- Meta (WhatsApp Business Platform, Instagram): sending and receiving messages.
- AI providers (Anthropic, OpenAI): generating replies and transcribing voice notes. Under their API terms they do not use this data to train their models.
- Hetzner (Finland and Germany, EU): servers and database. Cloudflare: network and security.
- Stripe (or Shopify, for App Store installs): subscription payments by businesses.
- Sentry: error monitoring, with phone numbers masked.
- Google, Shopify, WooCommerce or payment providers (such as ifthenpay, Paystack, Flutterwave, Stripe or M-Pesa): only when a business connects them, and only what that connection needs.
5. International transfers
Sabu Labs LLC is based in the United States and our servers are in the EU. Where personal data from the EU, EEA or UK is transferred to countries without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and the UK addendum) or another valid safeguard.
6. How long we keep it
Conversations and files are deleted automatically after the retention period each business sets. Account data is kept while the account exists and deleted after it is closed, except what the law requires us to keep (for example billing records).
7. Your rights and how to delete your data
Depending on where you live (for example under the GDPR in the EU and UK, or state privacy laws in the US), you can ask to access, correct, export or delete your data, object to or restrict its use, and opt out of marketing messages at any time by replying "STOP".
- Customer of a business: write "delete my data" in the chat, ask the business, or contact us and we will pass the request on. Businesses can export and delete your data from their dashboard.
- Business owner: contact us to close your account and delete all of the business's data.
We reply within 30 days. You can also complain to your local data protection authority.
8. Contact
Sabu Labs LLC · [email protected] · WhatsApp +15556505644