Privacy Policy
Last updated: 28 June 2026
Watsabi ("we", "us") is an AI assistant for WhatsApp. This policy explains what we collect and how we handle it. By using Watsabi you agree to this policy.
1. What we collect
- Account data — your email and a securely hashed password.
- Agent configuration — the instructions, business details, and knowledge (e.g. text or a website link) you add for your assistant.
- WhatsApp messages — when you link your number, the messages your customers send to it and the replies we generate pass through and are stored to operate the service (so the agent has context).
- Privacy-friendly analytics — anonymous visit counts for our website. We do not use tracking cookies, and we do not store visitors' IP addresses.
- Account activity & error logs — for support and security we log actions you take in the app (e.g. creating an agent, connecting WhatsApp, starting checkout) and errors you encounter, tied to your account email. We do not log your customers' message content here, and these logs are auto-deleted after 90 days.
2. How we use it
We use this data only to run the service: to generate AI replies, keep short conversation context, enforce plan limits, and support you. We do not sell your data or use it for advertising.
3. AI processing & sub-processors
To generate replies, message text is sent to our AI providers — Anthropic (Claude) and, as a fallback, Google (Gemini) — which process it in the United States. Our servers are hosted with Contabo (EU). These are our sub-processors. We use no other third parties for your message content.
4. Your customers' data (PDPA)
You — the business — are the data controller for your customers' personal data; Watsabi acts as a data intermediary/processor on your behalf under Singapore's PDPA. You are responsible for having a lawful basis to use Watsabi with your customers and, where appropriate, for letting them know an AI assistant may respond.
5. Retention & deletion
We keep your account and agent data while your account is active, and recent message history to provide context. You can ask us to delete your data at any time, and we delete your account data within 30 days of account closure. Backups are retained for up to 14 days.
6. Security
Data is encrypted in transit (HTTPS). Passwords are hashed. Access is restricted. No method is 100% secure, but we take reasonable measures to protect your data.
7. Your rights
You may request access to, correction of, or deletion of your personal data by emailing us. We'll respond within a reasonable time.
8. Changes
We may update this policy; material changes will be reflected here with a new date.
This is a plain-language summary, not legal advice — we recommend you have it reviewed before relying on it commercially.
Questions? Email hello@watsabi.app.