Privacy Policy

What we collect

• Your account details: name, email, and a password stored encrypted.
• The business information you provide to build your website, such as your current website's link, your services' description, and your images.
• Signing in with Google is optional, and we receive only your name and email from it.
• Payment happens entirely at the licensed payment provider; we never see or store your card details.

Analytics and cookies

• We use a privacy-respecting analytics tool to measure site visits without tracking you across other websites.
• We use Microsoft Clarity to understand and improve how the site is used, through usage metrics and session recordings, with sensitive data masked in recordings. Details of Microsoft's data processing are in the Microsoft privacy statement.
• Essential cookies power sign-in and sessions, and we have no advertising cookies.

Your website visitors' data

When your website runs with the AI assistant and the leads inbox, visitor conversations and interested visitors' details are collected for you and appear in your account. We process them on your behalf and never use them for any other purpose.

How we use your data

• Running the service and building your website.
• Contacting you about your orders and your account.
• Improving the product.
• We never sell your data, and there is no advertising built on your data.

Sharing with service providers

We share the minimum necessary data with providers who run the service:

• Hosting and infrastructure.
• The email service.
• The licensed payment provider.
• Anthropic (Claude), the AI model provider that builds and revises your website and store, and writes your documents, proposals, meeting minutes and marketing posts: it receives only what that work needs, such as your business details, your site's content and files, and the deal and meeting notes you add.
• OpenAI, the AI model provider that writes your assistant's replies to your customers on email, WhatsApp and your website, and draws your website's images: it receives the conversation it is answering with the business facts it needs, and the image descriptions.
• Google (Gemini), the AI model provider that reads incoming emails and payment receipts for you, transcribes voice notes, suggests wording and answers your customers when OpenAI is unavailable: it receives only the messages, files and voice notes it works on.
• Perplexity, the AI model provider that classifies your customers' email and WhatsApp messages and checks the assistant's replies when the features that use it are on: it receives the message text or an attachment's extracted text, the assistant's reply or the draft being checked, and your approved business facts when a check needs them, all shortened and with contact details masked. When photo sorting is on, it also receives the photos your customers send in a chat (for example a transfer receipt or a product picture), only to tell what kind of photo it is; if it is an identity document, its details are not read or extracted.

Each provider receives only what it needs to deliver its service.

Data retention and your rights

• We keep your data for as long as your account is active.
• You can request a copy of your data, or its deletion, at any time via hello@getwajha.com.
• Deleting your account deletes your data within a reasonable period, except what the law requires us to keep.

Security

Your data travels encrypted, passwords are stored encrypted, and internal access to data is limited to the fewest permissions possible.

Changes to this policy

If we update this policy, the new version is published here with its date.

Contact us

Any question about your privacy, email us at hello@getwajha.com.