Skip to content
Ajamjo
Who It's ForPMS IntegrationsPricingAboutBook a Demo
Ajamjo
  • Who It's For
  • PMS Integrations
  • Pricing
  • About
Book a Demo

Privacy Policy

Last updated: October 11, 2026

Introduction

Ajamjo is operated by Denobiq Inc. ("we", "us", "our"). We provide a guest experience platform that generates personalized travel itineraries for guests at participating hotels and short-term rental properties. This Privacy Policy explains how we collect, use, share, and protect personal data in connection with our services.

This policy applies to guests who interact with Ajamjo through a participating property, as well as property administrators who manage their property on our platform.

Data Controller

Denobiq Inc.
Toronto, ON, Canada
Contact: info@denobiq.com

What We Collect

  • Guest information: Name, email address, and travel preferences submitted via the guest portal or provided through property management system (PMS) integration.
  • Reservation data: Check-in and check-out dates associated with your stay.
  • Usage data: Itinerary views, activity interactions, and promotion engagement within the guest portal.
  • Email preferences: Your opt-out choices for different categories of email communications.
  • SMS information (where offered and opted in): Your mobile phone number, the content of text messages sent and received, your consent record (when and how you opted in), and carrier delivery status. See the "SMS Text Messages" section below.
  • WhatsApp (where your property uses it): Where you have agreed to WhatsApp messages or messaged the property there, your WhatsApp profile name, the identifier WhatsApp gives your account for messaging the property, the messages exchanged, and a record of your consent. See the "WhatsApp Messages" section below.

How We Use Your Data

  • To generate a personalized travel itinerary based on your preferences and your property's local context.
  • To send transactional emails: itinerary delivery, reservation updates, and account-related communications.
  • To send text (SMS) or WhatsApp messages where a property uses them and you have agreed to receive them, for example, arrival and check-in instructions, itinerary suggestions, and occasional on-property offers.
  • To enable property promotions and upsells relevant to your stay (subject to your email preferences).
  • To collect optional guest feedback and survey responses.
  • To improve our platform and the quality of AI-generated recommendations.

AI Processing (OpenAI)

We use OpenAI's language models to generate personalized travel itineraries. When generating your itinerary, your travel preferences and property location context are sent to OpenAI for processing. We do not use your data to train OpenAI's models, and OpenAI does not use API data submitted by us to train its models.

We aim to limit the personal data sent to OpenAI to what is needed to generate a useful itinerary, primarily your stated preferences (for example, "interested in local dining and outdoor activities") and your property's location context. We do not send payment information to OpenAI.

OpenAI is a named AI sub-processor under this policy. OpenAI's data processing is governed by their Privacy Policy and Data Processing Agreement.

Legal Basis for Processing

  • Legitimate interest: Generating travel itineraries for property guests as part of the concierge service requested by the property on your behalf.
  • Consent: Optional email categories (promotional emails, surveys). You may withdraw consent at any time via your email preferences link.
  • Contract performance: Communications directly related to your reservation and stay.

Data Sharing and Sub-Processors

We share data with the following categories of recipients:

  • OpenAI: AI itinerary generation. We aim to limit what is shared to the preferences and property location context needed to build the itinerary.
  • Resend: Transactional email delivery. Resend receives the guest email address and email content for delivery.
  • Twilio: Text message and WhatsApp delivery, where your property uses it. Twilio receives your mobile phone number and message content to deliver messages, and processes them in the United States. See the "SMS Text Messages" and "WhatsApp Messages" sections below.
  • Meta Platforms (WhatsApp): WhatsApp message delivery, where your property uses WhatsApp. Meta receives your phone number and the content of the messages, and passes us your WhatsApp profile name and the identifier WhatsApp gives your account. For users in the EEA the provider is Meta Platforms Ireland Ltd, and elsewhere it is Meta Platforms, Inc. See the "WhatsApp Messages" section below.
  • Supabase: Secure database hosting for all platform data.
  • Your PMS provider (where integrated): Property Management System integration. Data flows from your PMS provider to Ajamjo (guest reservation data), not in reverse. We do not send personal data back to your PMS provider.

We do not sell personal data to third parties.

Data Retention

  • Guest and itinerary data: Retained for the duration of the property's relationship with Ajamjo.
  • Webhook payloads (raw PMS events): Retained for 30 days, then automatically deleted.
  • Guest-PMS mappings: Retained for 90 days of inactivity after last use.
  • Email preferences (opt-out records): Retained indefinitely to honor unsubscribe requests even after other guest data has been deleted.
  • Copies held by Twilio and Meta: Twilio and Meta retain message data under their own retention policies, set out in Twilio's Privacy Notice and WhatsApp's Privacy Policy. Our own retention periods are the ones stated in this section.

Your Rights

Under applicable privacy laws, you have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate personal data.
  • Erasure: Request deletion of your personal data ("right to be forgotten").
  • Portability: Request your data in a machine-readable format.
  • Restriction: Request that we limit processing of your data.
  • Objection: Object to processing based on legitimate interest.

To exercise these rights, contact info@denobiq.com or speak to your property's staff. You can manage email opt-out preferences via the link in every email we send you.

International Data Transfers

Data is processed and stored mainly in Canada and the United States, and some providers also process it in other countries. Specifically:

  • Supabase database hosting: US East region.
  • OpenAI inference processing: United States.
  • Resend email delivery infrastructure: United States.
  • Twilio SMS delivery infrastructure: United States.
  • WhatsApp message delivery (Twilio and Meta Platforms): United States and other countries where Meta operates. See the "WhatsApp Messages" section below.

Where personal data is transferred outside the EEA, we rely on appropriate safeguards including Standard Contractual Clauses and the sub-processors' own compliance frameworks.

Cookies

We use functional cookies only, limited to authentication (keeping you signed in to the property admin portal). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

SMS Text Messages

Where a participating property offers SMS and you opt in to receive text messages, we process the following information:

  • Your mobile phone number (in E.164 format)
  • The content of messages you receive and send
  • A consent record (when you opted in, how, and from which form or page)
  • Delivery status (sent, delivered, failed) from the SMS carrier

We use Twilio, Inc. as our SMS service provider. Twilio is based in the United States, and your phone number and message content will be processed by Twilio's infrastructure in the United States in order to deliver your messages. We maintain a Data Processing Addendum (DPA) with Twilio that incorporates Standard Contractual Clauses (SCCs) approved by the European Commission, which provide a recognized mechanism for the international transfer of personal information. Twilio's DPA is available at twilio.com/legal/data-protection-addendum.

Canadian residents: This international transfer is disclosed in accordance with PIPEDA Schedule 1, Principle 4.1.3 (Accountability for transferred information).

EU/EEA residents: The transfer relies on the EU Standard Contractual Clauses (Module 4, Controller-to-Processor) incorporated by reference through Twilio's DPA. Canada holds a European Commission adequacy decision for transfers to organizations subject to PIPEDA, which covers the EU → Canada leg; the onward transfer from Canada to Twilio in the United States relies on the SCC mechanism.

Message frequency varies (typically 3 to 8 messages per stay). Message and data rates may apply. You can opt out or get help at any time:

  • Reply STOP to any text message, or on WhatsApp, to unsubscribe and stop all further messages.
  • Reply START to re-subscribe after a previous STOP.
  • Reply HELP for help, or contact the property's front desk.

Consent to receive text messages is voluntary and is not required to make or keep a reservation. We retain SMS message content and consent records for the periods required by applicable law, including unsubscribe records for at least 60 days, and consent records for up to 3 years from your last activity, as required by Canada's Anti-Spam Legislation (CASL). To request access, correction, portability, or deletion of your SMS-related personal information, contact info@denobiq.com.

WhatsApp Messages

Properties using Ajamjo can choose to message guests on WhatsApp as well as by text message. Where your property does, the property may send you the same kinds of messages over WhatsApp, and you can reply there. We only send you WhatsApp messages if you agreed to be contacted on WhatsApp, or if you messaged the property on WhatsApp first. When a WhatsApp message cannot be delivered, we may send it to you as a text message instead, but only if you have also agreed to receive text messages.

WhatsApp messages are delivered through Twilio, Inc. (described above) and the WhatsApp Business Platform operated by Meta Platforms Ireland Ltd for users in the EEA, and by Meta Platforms, Inc. elsewhere, together with their affiliates, including WhatsApp. To deliver messages in both directions, the following information is processed by Twilio and by Meta:

  • Your mobile phone number
  • Your WhatsApp profile name, and the identifier WhatsApp gives your account for messaging the property
  • The content of the messages you receive and send, including any photos or files
  • Delivery status (sent, delivered, read, failed)

Meta processes this information in the United States and other countries where it operates. Canadian residents: this international transfer is disclosed in accordance with PIPEDA Schedule 1, Principle 4.1.3. EU/EEA residents: the transfer relies on the Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework, as provided in Meta's WhatsApp Business Data Processing Terms (whatsapp.com/legal/business-data-processing-terms), which the WhatsApp Business account holder for your property accepts. Meta also processes some of this information as an independent controller under its own terms, for example to operate WhatsApp and to prevent abuse.

Your use of WhatsApp itself is also governed by WhatsApp's own terms and privacy policy, available at whatsapp.com/legal. We keep WhatsApp message content and consent records for the same periods as text messages, described above. Twilio and Meta also keep copies of messages and delivery information under their own terms, for their own set periods, and our erasure process does not reach those copies. You can stop WhatsApp messages from a property at any time by replying STOP, and opting out of either text messages or WhatsApp messages from a property stops both.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the platform after an update constitutes acceptance of the revised policy.


Contact

For privacy inquiries, data subject requests, or concerns: info@denobiq.com

Denobiq Inc. • Toronto, ON, Canada

Ajamjo
Case StudiesPrivacyTermsAboutContact Us© 2026 Ajamjo, a Denobiq Technologies Inc. company