We do not sell personal data
Data is shared only with trusted operators and vendors when that is necessary to deliver the service or comply with legal duties.
Privacy, cookies and data
Privacy Policy
This Privacy Policy explains how WaioChat collects, uses, shares, protects and retains data related to our web applications, browser extensions, APIs, AI-powered features and support services.
Plain-language summary
In short, WaioChat processes the data required to authenticate accounts, run automations, manage subscriptions, answer support requests and protect the platform. We do not sell personal data and limit sharing to operational partners and legal obligations.
This summary is meant to improve readability, but it does not replace the full clauses on this page.
AI is used on demand
Content is sent to AI providers only when a user triggers a feature that depends on that processing step.
Retention follows purpose
We keep data only for as long as needed to provide the service, prevent fraud, comply with legal duties and resolve disputes.
1. Scope of this policy
This policy applies to anyone who accesses or uses WaioChat services, including the website, landing pages, dashboard, browser extensions, APIs and AI-powered workflows.
- The policy covers personal data, account data, technical data and operational metadata connected to service usage.
- It also covers interactions with support, billing, licensing and integrations connected by the user.
- If you do not agree with this policy, you must discontinue use of the services.
2. Information you provide
We may collect information submitted directly by the user when creating an account, subscribing to plans or contacting support.
- Name, email, phone number, company details, login credentials and subscription preferences.
- Data submitted in billing, onboarding, support or account verification forms.
- Support communications to the extent necessary to answer the open request.
3. Payments and billing
Recurring payments and billing events are handled by specialist partners rather than directly by WaioChat.
- We may receive records such as payment status, active plan, subscription history and billing identifiers.
- Payments may be processed through providers such as Stripe and PayPal.
- WaioChat does not store full credit card numbers on its own servers.
4. Automation and operational data
To deliver WhatsApp-related features, the service may process operational metadata required for automations to work.
- Session identifiers, connected device metadata and synchronization settings.
- Automation workflows, message templates, schedules, event logs and linked integrations.
- Contact lists imported by the user and settings tied to execution, cadence or operational organization.
The user is solely responsible for ensuring proper consent, legal basis and permissions to process third-party data within their own operation.
5. AI-powered features
Some features depend on third-party AI providers to deliver the result requested by the user.
- Use cases include AI-generated replies, message improvement, summarization, translation, categorization and workflow assistance.
- Only the content relevant to execute the chosen functionality is transmitted to the responsible provider.
- Providers may include OpenAI, Google AI and Microsoft AI depending on the feature in use.
WaioChat does not use user conversations to train AI models unless that is explicitly stated in the product.
6. Automatically collected data and cookies
We also collect technical and usage data for security, reliability, performance measurement and product improvement.
- IP address, browser, operating system, device type, session activity, usage logs and error reports.
- Approximate location derived from IP when technically needed for analytics or security.
- Cookies and similar technologies may be used for authentication, preferences, analytics and platform reliability.
7. Local browser processing
Whenever technically possible, browser-extension functionality processes information inside the user browser environment.
- Only authentication, synchronization, analytics, licensing, AI calls and cloud features need to communicate with WaioChat servers.
- This design reduces unnecessary traffic and helps limit data exposure to truly required operations.
- Local processing does not eliminate the need for minimal technical logs tied to security and support.
8. How we use information
We use personal and operational information only for legitimate purposes related to the service and platform protection.
- Create and manage accounts, authenticate users and validate active licenses.
- Run automations, synchronizations, AI features, billing and customer support.
- Improve product performance, monitor abuse, prevent fraud and comply with legal obligations.
- Send administrative notifications and analyze aggregated usage trends.
9. Legal bases for processing
WaioChat may rely on different legal grounds depending on the purpose involved in each processing activity.
- User consent, where applicable.
- Contract performance and pre-contractual measures needed to provide the service.
- Legitimate business interests compatible with the data subject rights and expectations.
- Legal obligations, fraud prevention and platform security.
Users covered by GDPR, UK GDPR, LGPD, CCPA and similar laws may have additional rights depending on the applicable jurisdiction.
10. Sharing and international transfers
WaioChat may share data with trusted third parties when that is necessary to operate the service or comply with legal obligations.
- Payment processors, cloud infrastructure, analytics, email, AI, support and security monitoring vendors.
- Public authorities or legitimate parties where required by law or necessary to protect rights, integrity and platform security.
- International transfers may occur when vendors or infrastructure are located outside the user country.
WaioChat does not sell personal information and limits sharing to the minimum compatible with the contracted operation.
11. Retention and security
We adopt reasonable technical and organizational safeguards to protect data under our control.
- We use HTTPS, secure authentication, access restrictions, infrastructure monitoring and abuse-prevention mechanisms.
- Data is retained only for as long as needed for service delivery, compliance, dispute resolution, anti-fraud and contractual enforcement.
- After account termination, data may be deleted, anonymized or securely archived where legally required.
No transmission or storage method can guarantee absolute protection against security incidents.
12. Data subject rights, minors and updates
Users may exercise privacy rights and track future revisions to this policy through WaioChat official channels.
- Depending on applicable law, you may request access, correction, deletion, portability, restriction of processing and withdrawal of consent.
- The service is not intended for individuals under 18 and WaioChat does not knowingly collect personal data from minors.
- WaioChat currently does not respond to browser Do-Not-Track signals.
- Updated versions of this policy become effective when published on the website.
Need to submit a privacy request?
Use WaioChat official channels for questions about data processing, rights requests, incidents, billing or legal support. Before publishing a final production version, obtain human legal review.