Privacy Policy
Last updated:
1. Controller
The controller responsible for this website is [Company legal name], [registered address], [country]. Contact: [privacy contact email].
2. Data we process
- Contact and lead data you submit (name, business name, business type, WhatsApp number, email, country, number of branches, message volume, message).
- Account data (name, email, hashed password, role, business).
- Billing data (plan, invoices, payment status). Card data is processed by our payment provider and never stored by us.
- Demo agent usage: we store an anonymous demo session (industry, language, message count). The text you type in the demo is processed to generate replies and is not stored in analytics.
- Technical data (IP address in hashed form for rate limiting and security, browser type, error logs).
3. Customer conversations (agent data)
When a business uses WakilSmart, the conversations between that business and its customers are processed on behalf of that business. For this data the business is the controller and WakilSmart acts as processor. See our Data Processing Information.
4. Purposes and legal bases
- Responding to your request and preparing an offer (pre-contractual measures).
- Providing the service and billing (performance of contract).
- Security, abuse prevention and rate limiting (legitimate interest).
- Analytics only with your consent, which you can withdraw at any time in the cookie settings.
5. Recipients / processors
[List processors actually used, e.g. hosting provider, database provider, email provider, payment provider, WhatsApp Business Platform (Meta), AI model provider] — each bound by a data processing agreement.
6. International transfers
[Describe where data is stored and the safeguards for transfers, e.g. standard contractual clauses.]
7. Retention
Leads and contact requests: [period]. Account and billing data: for the duration of the contract and statutory retention periods. Demo sessions: [period].
8. Your rights
You may request access, correction, deletion, restriction, portability and object to processing, and withdraw consent at any time. Contact: [privacy contact email]. You may also complain to the competent data protection authority.