Privacy Policy

Last updated: July 24, 2026

1. Overview

This Privacy Policy describes how we collect, use, store, and share information when you use the WhatsApp AI Bot platform ("Service"). We are committed to protecting your privacy and the privacy of your end-users.

2. Information We Collect

2.1 Account Information

When you register, we collect:

• Google account profile data (name, email, profile picture)
• Business information (name, description, industry, phone, website)

2.2 Business Configuration Data

You provide us with:

• Knowledge base content (FAQs, policies, business information)
• Product listings (names, descriptions, prices, image URLs)
• Custom AI instructions
• Working hours and business settings

2.3 Conversation Data

When the AI bot processes messages, we temporarily store:

• WhatsApp message content (text and images sent by end-users)
• AI-generated responses
• Conversation history (in-memory, evicted after a period of inactivity)

2.4 Usage & Analytics Data

We automatically collect:

• Message counts and usage statistics per business
• AI token usage and cost data (prompt tokens, completion tokens)
• User feedback reactions (thumbs up/down)
• Connection status and error logs

2.5 Device & Technical Data

We collect:

• IP addresses (for authentication and security)
• Browser type and version
• Session timestamps

3. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Service
• Process AI conversations and deliver responses via WhatsApp
• Track usage against subscription plan limits
• Calculate AI inference costs
• Improve the Service and user experience
• Send service-related notifications (connection issues, limit warnings)
• Detect and prevent abuse or security issues

4. Data Storage & Security

4.1 Storage

Data is stored in:

• Google Cloud Firestore — business configurations, knowledge bases, usage data
• WhatsApp Web sessions — authentication tokens for WhatsApp connectivity
• In-memory — conversation history (not persisted permanently)

4.2 Security Measures

• All data传输使用 TLS 加密
• Firebase Authentication with secure session cookies
• Per-business data isolation
• Admin SDK access restricted to server-side only

5. Data Sharing

We do NOT sell your data. We may share data with:

• AI providers (OpenAI, DeepSeek, Google, OpenRouter) — message content is sent to these providers for inference processing
• WhatsApp/Meta — message delivery via the WhatsApp Business API
• Firebase/Google — data storage and authentication

Each third-party provider has their own privacy policy governing their use of data.

6. WhatsApp End-User Data

Messages from your WhatsApp contacts are processed by the AI to generate responses. We:

• Do not use end-user conversation data for advertising or profiling
• Do not sell or share end-user data with unrelated third parties
• Store conversation history temporarily for context management
• Process images sent by users solely for AI analysis purposes

7. Data Retention

• Account data — retained until you delete your account
• Conversation history — kept in memory for context, evicted after inactivity
• Usage analytics — retained for the duration of your subscription
• Knowledge base backups — stored locally and in Firestore until deleted

8. Your Rights

You have the right to:

• Access, modify, or delete your business data at any time from the dashboard
• Export your knowledge base data
• Request deletion of your account and all associated data
• Opt out of non-essential data collection

9. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification. The "Last updated" date at the top reflects the most recent revision.

11. Contact

For privacy-related inquiries, please contact us through the support channel available in your dashboard.