Privacy Policy

Last updated: 1 June 2025

1. Who We Are

WaAI ("we", "us", "our") is an AI-powered WhatsApp automation platform operated from the United Arab Emirates. We provide businesses with automated customer service tools via the WhatsApp messaging platform. Our contact email is goharabdullah412@gmail.com.

2. What Data We Collect

We collect the following categories of data:

• Business account data: Name, email address, business name, business type, and billing information provided at registration.
• WhatsApp message data: Incoming customer messages processed through your connected WhatsApp number. Messages are processed to generate AI responses and are not stored beyond 30 days unless required for dispute resolution.
• Booking and order data: Customer names, contact details, booking times, and service details submitted through your bot flow.
• Usage data: Dashboard activity, bot configuration changes, and feature usage for product improvement purposes.

3. How We Use Your Data

• To deliver the WaAI service — processing messages, managing bookings, and generating AI replies.
• To improve our AI models and bot response quality (using anonymised, aggregated data only).
• To send product updates, billing notifications, and support communications.
• To comply with UAE legal obligations.

4. Data Sharing

We do not sell your data. We share data only with the following sub-processors required to operate the service:

• OpenAI — for AI message processing (messages are not used to train OpenAI's public models under our enterprise agreement).
• Supabase — for secure database hosting.
• Render / Vercel — for application hosting.

5. Data Retention

WhatsApp message logs are retained for 30 days then permanently deleted. Booking and order records are retained for 12 months or until you delete them from your dashboard. Account data is retained until you close your account.

6. Your Rights

You have the right to access, correct, export, or delete your data at any time. Contact us at goharabdullah412@gmail.com to exercise any of these rights. We will respond within 72 hours.

7. Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). WhatsApp connections use the Baileys library with locally stored session keys. We conduct security reviews quarterly.

8. Cookies

Our dashboard uses essential session cookies only. We do not use advertising or tracking cookies. See our Cookie Policy for details.

9. Changes to This Policy

We will notify you by email of any material changes to this policy at least 14 days before they take effect.

10. Contact

For any privacy questions: goharabdullah412@gmail.com