Privacy Policy

1. About this policy#

This policy explains what information WaConnect ("we", "us") collects when you use waconnect.ai, the dashboard, the API, the hosted connect pages and the WaConnect Shopify app (the "Service"), how we use it, who we share it with, and the choices you have.

2. Information you give us#

• Account details: your name, email address and password (stored only as a secure hash). If you sign in with Google, we receive your name and email address from Google.
• Business details: your business name, time zone, business hours, and the names, email addresses and roles of teammates you add.
• Payments: when you buy credits, Stripe processes your card. We never see or store your full card number; we keep the amount, date and receipt.
• Messages to us: what you send through the contact form or by email.

3. Information created when you use WaConnect#

• WhatsApp numbers: the phone numbers you connect and their connection history. The keys WhatsApp uses for the linked-device session are stored encrypted.
• Inbox numbers: the chats, messages, photos and documents sent and received, so your team can read and reply in the inbox, until you delete them.
• API numbers: messages are kept for about 24 hours (for delivery receipts and retries) and are not stored after that. To make sure an API number only replies to people who wrote to it, we keep the customer's phone number and the time of their last message for 30 days.
• Contacts and campaigns: the contacts and audience lists you build, the campaigns you send and their results, and opt-outs.
• AI agent: the settings, prompt and knowledge you give it (your website pages, uploaded files, your Shopify products), and the leads and escalations it records.
• Shopify: if you connect a store, your store's address, an access token (stored encrypted), and your products, prices and stock. We don't access your Shopify customers or orders.
• Usage and security data: sign-in sessions, IP addresses, browser and device information, and logs used to keep the Service secure and working.

4. How we use information#

• to provide the Service: connect your numbers, send and receive messages, run campaigns and the AI agent;
• to keep accounts secure, prevent abuse and fix problems;
• to process payments and send receipts;
• to send service emails such as verification codes, password resets, receipts and important notices;
• to answer your questions and support requests.

We don't sell your information, and we don't use it for advertising.

5. Your customers' information#

When you use WaConnect to talk to your own customers, you decide what is sent and collected, and you are responsible for having a lawful basis to message them. We process that information only to provide the Service to you, following your instructions.

6. Who we share information with#

We share information only with the providers that help us run the Service, and only as needed:

We may also share information when the law requires it, to protect our rights or users' safety, or as part of a merger or sale of the business.

7. Cookies#

We use only the cookies needed to keep you signed in and secure. We don't use advertising or tracking cookies.

8. How long we keep information#

• Account data: until you delete your account. Deleting your account in Settings → Security removes your account and its data, and logs your WhatsApp numbers out.
• Inbox messages and contacts: until you delete them, or your account.
• API number messages: about 24 hours. Reply records: 30 days.
• Notifications: 90 days.
• Payment records: as long as the law requires.

9. Security#

Connections to WaConnect are encrypted. WhatsApp session keys and Shopify access tokens are encrypted at rest. Access to data is limited to what each person's role allows. No system is perfectly secure, so please keep your password and API keys safe.

10. Your choices and rights#

You can view and update your account details in Settings, and delete your account at any time. You can also ask us to access, correct, export or delete your information by emailing contact@waconnect.ai. We reply within 30 days. Depending on where you live, you may have further rights under laws such as the GDPR or the CCPA.

11. Where information is stored#

WaConnect is run from the United States, and information is stored there. If you use the Service from elsewhere, your information is transferred to the United States.

12. Children#

The Service is for businesses and is not meant for anyone under 18.

13. Changes to this policy#

We may update this policy. We'll change the "Last updated" date, and for important changes we'll email account owners before they take effect.

14. Contact#

Questions about this policy or your information: contact@waconnect.ai, or use our contact form.