Privacy Policy

Wazello ("we," "us," or "our") operates the Wazello platform, which provides AI-powered WhatsApp assistant services for businesses. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, dashboard, APIs, and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use our Service.

Information We Collect

We collect information you provide directly when you create an account, configure a bot, or contact our support team. This includes:

• Account information: name, email address, and hashed password.
• Billing information: payment method details processed securely through Stripe. We do not store full credit card numbers on our servers.
• Bot configuration data: business name, bot personality, system prompts, knowledge-base files, and working-hours schedules.
• Conversation data: messages exchanged between your WhatsApp number and end customers while the bot is active. This data is necessary to provide the AI assistant functionality.
• Usage data: credit consumption, feature usage, login timestamps, and dashboard interactions collected automatically through server logs and analytics.

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve the Service, including processing AI-powered conversations and generating action records.
• To manage your account, authenticate sessions, and enforce usage-based billing.
• To send transactional notifications such as credit warnings, subscription renewals, and security alerts.
• To respond to customer support requests and troubleshoot technical issues.
• To detect, prevent, and address abuse, fraud, and security threats.
• To analyze anonymized, aggregated usage patterns to improve performance and develop new features.

We do not sell your personal information to third parties. We do not use conversation data to train general-purpose AI models.

Data Storage & Security

Your data is stored on secure, encrypted servers hosted in SOC 2-compliant data centers. We implement industry-standard security measures including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256).
• Hashed and salted passwords — we never store passwords in plain text.
• Role-based access controls and audit logs for internal systems.
• Regular security audits and dependency vulnerability scanning.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any breaches in accordance with applicable laws.

Third-Party Services

To deliver the Service we rely on trusted third-party providers. These include, but are not limited to:

• AI model providers (e.g., Google Gemini) for processing conversational inputs and generating responses.
• Stripe for payment processing and subscription management.
• Cloud infrastructure providers for hosting, databases, and file storage.
• Sentry for error monitoring and performance tracking.

Each third-party service is bound by its own privacy policy and data processing agreements. We only share the minimum information necessary for them to perform their function.

Data Retention

We retain your data only for as long as necessary to provide the Service and fulfil the purposes described in this policy. Specific retention periods are as follows:

• Account information: retained for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.
• Conversation data: WhatsApp messages and conversation history are retained for 90 days from the date of the last message in each conversation. After 90 days, conversation content is automatically purged. Aggregated, anonymized analytics derived from conversations may be retained longer.
• Action records: orders, bookings, and other action records are retained for 12 months from creation. You can manually delete individual actions from the dashboard at any time.
• Knowledge base files: files you upload are retained for as long as they remain in your bot's knowledge base. When you delete a file, all associated data (including vector embeddings) is removed within 24 hours.
• Billing and payment records: retained for 7 years from the transaction date, as required by applicable tax and financial regulations.
• Server logs and usage data: retained for 90 days for debugging and security purposes, then automatically deleted.

When data reaches the end of its retention period, it is securely deleted or anonymized so that it can no longer be associated with you. You may request early deletion of your data at any time by contacting us (see "Your Rights" below).

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we update or correct inaccurate information.
• Deletion: request that we delete your account and associated data. Some data may be retained as required by law or for legitimate business purposes.
• Portability: request your data in a structured, machine-readable format.
• Objection: object to processing of your personal data for certain purposes.

To exercise any of these rights, please contact us at support@wazello.com. We will respond to verified requests within 30 days.

Cookies

We use essential cookies and local storage to keep you signed in and to remember your preferences. We do not use third-party advertising cookies.

• Authentication tokens: stored in local storage to maintain your session.
• Preference cookies: store settings such as sidebar state and theme preference.
• Analytics cookies: anonymous usage data to help us understand how the Service is used. These can be disabled in your browser settings.

Contact Us

If you have any questions or concerns about this Privacy Policy, please reach out:

• Email: support@wazello.com
• Contact page: wazello.com/contact

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a notice on our Service prior to the change becoming effective. Your continued use of the Service after any changes constitutes acceptance of the updated policy.