waai.me waai.me

Privacy Policy

Last updated: May 4, 2026

1. Introduction

waai ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and platform (the "Service"). Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

2.1 Information You Provide

  • Account information: company name, contact person, email address, phone number
  • WhatsApp API credentials: phone number ID, access token, webhook verify token, app secret
  • AI provider configuration: API keys, model selection, system prompts
  • Knowledge base content: Q&A pairs, logic flows, and associated data
  • Communication data: messages sent through the platform

2.2 Information Collected Automatically

  • Usage data: features used, pages visited, session duration
  • Device information: browser type, operating system, IP address
  • Analytics: aggregated usage patterns and performance metrics

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process transactions and send related information
  • Send technical notices, updates, security alerts, and support messages
  • Respond to your comments, questions, and customer service requests
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent or unauthorized activities
  • Personalize and improve your experience

4. Data Security

We take the security of your data seriously. All sensitive credentials (WhatsApp tokens, AI API keys, Google OAuth tokens) are encrypted at rest using AES encryption (Fernet). All data in transit is protected via HTTPS/TLS. We implement industry-standard security measures to protect your information from unauthorized access, alteration, disclosure, or destruction.

5. Data Sharing

We do not sell, trade, or otherwise transfer your personal data to outside parties except in the following circumstances:

  • To third-party service providers who assist us in operating the Service (e.g., payment processing via Stripe, AI providers as configured)
  • To comply with legal obligations or legal process
  • To protect and defend our rights or property
  • With your explicit consent

6. Third-Party Services

The Service integrates with third-party services including:

  • WhatsApp (Meta Cloud API): For sending and receiving WhatsApp messages
  • Google Workspace: Calendar, Drive, Docs, and Sheets integrations (OAuth2)
  • AI Providers: OpenAI, Anthropic, z.ai, and other configured providers for AI responses
  • Stripe: For payment processing

Each third-party service has its own privacy policy. We encourage you to review their policies when using these integrations.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Conversation data and logs are retained for the duration of your active subscription. Upon account deletion, personal data is removed from our active systems within 30 days.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the data we hold about you
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your personal data
  • Portability: Request transfer of your data in a machine-readable format
  • Objection: Object to our processing of your personal data
  • Withdrawal of consent: Withdraw consent at any time where we rely on consent

To exercise any of these rights, please contact us at hello@waai.me.

9. Cookies

We use essential cookies to maintain your session and preferences. We do not use tracking cookies or sell cookie data to third parties. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

11. International Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at hello@waai.me or visit our contact page.