Privacy Policy

1. What we collect

• Account data — your name, email address, and a hash of your password (we never store passwords in plain text).
• WhatsApp session data — the phone number you link and the encrypted credentials needed to keep the connection alive.
• Messages and media — the content of conversations flowing through your connected numbers, stored so we can deliver webhooks, show conversation history in your dashboard, and power features you enable.
• Configuration — webhook URLs, API key hashes, team memberships and roles, and delivery logs.

2. How we use it

We use this data only to operate the service: routing messages to your webhooks, sending your replies, displaying dashboards, securing accounts, and sending transactional email such as team invitations. We do not sell your data or use message content for advertising.

3. AI agents

If you enable an AI agent on a session, the relevant conversation messages are sent to the model provider you configured (e.g. Anthropic or OpenAI) using your own API key, solely to generate replies. Provider handling of that data is governed by the provider's own terms. Agents are off by default.

4. Sharing

We share data only with processors needed to run the service: cloud hosting for infrastructure and storage, an email delivery provider for transactional email (such as invitation emails), and Stripe for subscription billing (Stripe receives your billing details; we never store your card). Each receives only what it needs. We disclose data to authorities only when legally required.

5. Advertising, analytics, and cookies

Our public pages (such as the landing page and docs) include a conversion-measurement tag from X (Twitter) that uses cookies to measure the effectiveness of our ads, and Google Analytics to understand site traffic. Neither is present in the logged-in dashboard, and neither receives your conversations or account data. You can opt out via your X settings, Google's ads settings or analytics opt-out, or your browser's cookie controls.

6. Retention and deletion

Data is retained while your organization is active. Deleting a WhatsApp session deletes its credentials; deleting your organization deletes its sessions, conversations, messages, media, webhooks, API keys, and team data. Residual copies in backups are purged on the backup rotation schedule.

7. Security

Passwords are hashed with argon2; API keys and invitation tokens are stored only as SHA-256 hashes; agent provider keys are encrypted at rest with AES-256-GCM; webhook deliveries are signed with HMAC-SHA256 so you can verify their origin. Access to production systems is restricted to authorized personnel.

8. Your rights

You can access and update your account data in the dashboard, and export or delete your data by deleting resources or your organization. Depending on your jurisdiction you may have additional rights (access, rectification, erasure, portability) — contact us to exercise them.

9. Messages belong to conversations you control

You are the controller of conversations flowing through the numbers you connect. Ensure you have a lawful basis to process your contacts' messages through whathooks, and inform them where required.

10. Changes and contact

We will announce material changes to this policy by email or in the dashboard. Questions: privacy@logicalminds.co.