Privacy Policy

We process account and organisation details, contact information, WhatsApp messages and message metadata, applicant and agent records, documents submitted through the service, audit records, and technical information needed to secure and operate the service.

Organisations using Wasap.ai decide which applicant, agent, message, and document information they submit. Those organisations are responsible for having an appropriate legal basis and providing required notices to the people whose data they manage.

We use information to authenticate users, connect authorised WhatsApp accounts, deliver messages, and operate automated systems in the background to help classify messages and files, track missing items and follow-ups, and present an overall operational picture. We also use information to manage cases and documents, provide support, prevent abuse, maintain audit trails, and improve reliability and security. Your organisation remains responsible for reviewing automated suggestions and deciding what action to take.

Information may be processed by infrastructure, communication, and AI providers required to operate the service, including Meta's WhatsApp Business Platform, Supabase, Vercel AI Gateway, and the model providers configured behind that gateway. We may also disclose information when required by law, to protect users and the service, or as part of a business transaction subject to appropriate safeguards.

When AI features are used, relevant message text, conversation context, message metadata, and, when needed for document analysis, PDF or image content may be sent through Vercel AI Gateway to the configured model provider. The resulting suggestions are stored in the relevant organisation's Wasap.ai workspace for its users to review.

Wasap.ai does not train its own models on workspace data. Data handling and retention are governed by Vercel AI Gateway and the configured model provider. See Vercel AI Gateway documentation.

We use access controls, tenant isolation, encryption for sensitive credentials, private document storage, short-lived document links, and audit logging. Within Wasap.ai, signed-in workspace members access data according to their organisation membership, role, permissions, and case assignments. No online service can guarantee absolute security.

We retain information while an account is active and as needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements. Workspace administrators can configure message and document retention from 30 to 3,650 days, apply a deletion grace period, run deletion cycles, and anonymise applicant records. A configured retention rule may therefore require earlier deletion or anonymisation.

Depending on your location, you may have rights to access, correct, delete, restrict, or export personal data, or object to certain processing. If your data was submitted by an organisation using Wasap.ai, contact that organisation first because it controls the relevant case data.

For privacy questions or requests, email privacy@wasap.ai.