wapai← Back to home

Privacy Policy

Last updated: 1 January 2026

Wapai ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect information in connection with our WhatsApp AI assistant service.

1. What data we collect

Business data: When you create an account, we collect your name, email address, business name, business type, address, phone number, and payment information.

Customer data: We collect data about your end customers when they interact with your WhatsApp assistant, including their phone number, name (if provided), messages, order history, and preferences.

Conversation data: All messages sent through your WhatsApp assistant are stored to enable the AI to provide context-aware responses and to provide you with conversation history.

Usage data: We collect information about how you use Wapai, including pages visited, features used, and time spent on the platform.

Technical data: IP addresses, browser type, device information, and cookies.

2. How we use your data

We use your data to:

  • Provide and improve the Wapai service
  • Enable your WhatsApp AI assistant to respond to customer messages
  • Process payments and manage your subscription
  • Send you service updates, invoices, and important notices
  • Provide customer support
  • Analyse usage patterns to improve our product
  • Comply with legal obligations

We do not sell your data or your customers' data to third parties.

3. Data sharing

We share data only with trusted service providers necessary to deliver our service:

  • WhatsApp / Meta: Messages are transmitted through the WhatsApp Business API
  • xAI (Grok): Conversation context is sent to generate AI responses. xAI does not use this data to train models
  • Supabase: Database hosting and authentication
  • Vercel: Application hosting and serverless functions
  • Twilio: WhatsApp message routing
  • Stripe: Payment processing

All processors are bound by appropriate data processing agreements.

4. Data retention

  • Conversation data: Retained for 12 months from the date of the conversation
  • Order data: Retained for 7 years for accounting/legal purposes
  • Account data: Retained while your account is active, and for 30 days after cancellation
  • Payment data: Managed by Stripe; we retain transaction records for legal compliance

You can request deletion of your data at any time via our GDPR tools in Settings or by emailing support@wapai.com.

5. Your rights

Under UK GDPR, you have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Ask us to correct inaccurate data
  • Erasure: Request deletion of your personal data ("right to be forgotten")
  • Portability: Receive your data in a machine-readable format
  • Object: Object to certain types of processing
  • Restrict processing: Ask us to limit how we use your data

To exercise any of these rights, contact us at support@wapai.com. We will respond within 30 days.

6. Cookies

We use cookies to keep you logged in, remember your preferences, and understand how you use Wapai. See our Cookie Policy for full details.

7. Children's privacy

Wapai is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

8. Contact us

For any privacy-related questions or to exercise your rights:

Email: support@wapai.com

If you are unhappy with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.