WAABOT

Privacy Policy

At Waabot, we prioritize the privacy and security of personal data. We are committed to transparently outlining how we collect, use, and safeguard your information. By using our platform and services, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We collect personal data from various sources and for different purposes:

• Account Information: When you sign up for our service, we collect information necessary to create and manage your account, including your name, email address, phone number, business name, and account preferences.
• Platform Usage Data: We gather data related to your use of the Waabot platform, including messaging activity, automation flows, broadcast campaigns, contact lists, and feature usage analytics.
• Communication Data: If you contact us via email or through our chat support, we may retain the content of your communication along with your contact details for reference and to improve our support services.
• Website and Technical Data: When you visit our website, we collect certain information such as your IP address, browser type, device information, operating system, and browsing behavior. This data helps us analyze website traffic and improve user experience.
• Third-party Integration Data: If you integrate third-party services (e.g., WhatsApp Business API, Facebook Messenger, Instagram, Telegram) with Waabot, we may collect data from those platforms to enable the functionality of our service, including contact information and message content.
• Payment and Billing Information: If you subscribe to a paid plan, we collect necessary billing information to process your payments securely, including billing address and payment method details (processed through secure third-party payment processors).
• Customer Contact Data: Information about your customers and contacts that you upload or sync to our platform, including phone numbers, names, and conversation history (only with proper consent from your customers).

2. How We Use Your Data

We utilize the collected data for the following purposes:

• Service Provision and Management: To provide, maintain, and improve our platform and services, including message delivery, automation features, customer support, and personalized user experience.
• Platform Communication: To communicate with you regarding account-related updates, service announcements, security alerts, and promotional offers. You have the option to opt out of marketing communications.
• Analytics and Optimization: To analyze usage patterns, troubleshoot issues, optimize our website and services, and develop new features based on user behavior and feedback.
• Security and Fraud Prevention: To monitor for suspicious activity, prevent fraud, ensure platform security, and protect against unauthorized access or misuse.
• Legal Compliance: To comply with legal obligations, respond to lawful requests from authorities, enforce our Terms of Service, and protect our rights and interests.
• Business Operations: To process payments, manage subscriptions, provide technical support, and maintain business records.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: Processing necessary to perform our contract with you and provide our services
• Legitimate Interest: Our legitimate business interests in improving services, security, and customer support
• Legal Compliance: Compliance with applicable laws and regulations
• Consent: Your explicit consent for marketing communications and optional features

4. Data Sharing and Disclosure

We do not sell your personal data to third parties. However, we may share your information in the following circumstances:

• Essential Service Providers: We engage trusted third-party service providers to assist in delivering our services, such as cloud hosting providers (AWS, Google Cloud), payment processors (Stripe, Paystack), email services, and analytics platforms. These providers are contractually obligated to handle your data securely and only for specified purposes.
• Platform Integration Partners: We may share data with integration partners (Meta/WhatsApp, Facebook, Instagram) to enable seamless interoperability between Waabot and third-party messaging platforms, as required for service functionality.
• Legal and Regulatory Requirements: We may disclose information in response to legal requests, court orders, government investigations, or to comply with applicable laws and regulations.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
• Safety and Security: To protect the safety and security of our users, prevent fraud, or address technical issues.

5. Your Rights and Choices

You have comprehensive rights regarding your personal data:

• Access and Portability: Right to access your personal data and request a copy in a portable format
• Correction and Updates: Right to update, correct, or modify inaccurate personal information
• Deletion: Right to request deletion of your personal data, subject to legal and contractual obligations
• Processing Restrictions: Right to object to certain data processing activities or request processing limitations
• Marketing Opt-out: Right to unsubscribe from marketing communications at any time
• Consent Withdrawal: Right to withdraw consent for processing based on consent

To exercise these rights or for any privacy-related inquiries, please contact us at privacy@waabot.com.

6. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Account Data: Retained while your account is active and for 90 days after account closure
• Message and Conversation Data: Retained for 6 months or as required for service functionality
• Financial Records: Retained for 7 years for tax and accounting purposes
• Legal and Compliance Data: Retained as required by applicable laws and regulations

7. Data Security

We employ industry-standard security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:

• Encryption: Data encryption in transit (TLS/SSL) and at rest using AES-256 encryption
• Access Controls: Strict access controls and authentication mechanisms for our systems
• Regular Monitoring: Continuous monitoring for security threats and vulnerabilities
• Staff Training: Regular security training for all employees with access to personal data
• Third-party Security: Due diligence on all service providers to ensure appropriate security measures

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. We will notify you of any material security breaches as required by law.

8. International Data Transfers

Your data may be processed and stored in countries other than your own, including but not limited to the United States, European Union, and other jurisdictions where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs) for transfers outside adequate jurisdictions
• Adequacy decisions by relevant data protection authorities
• Other appropriate transfer mechanisms as recognized by applicable law

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for platform functionality and user authentication
• Analytics Cookies: To understand user behavior and improve our services (Google Analytics, Mixpanel)
• Preference Cookies: To remember your settings and preferences

You can manage cookie preferences through your browser settings, but disabling certain cookies may affect platform functionality.

10. Children's Privacy

Waabot is not intended for use by children under the age of 18. We do not knowingly collect personal data from children under 18. If you believe that we have inadvertently collected information from a child under 18, please contact us immediately at privacy@waabot.com, and we will take appropriate steps to remove such data.

11. Third-Party Services and Links

Our platform may contain links to third-party websites or integrate with external services. This Privacy Policy does not apply to third-party services. We encourage you to review the privacy policies of any third-party services you access through our platform.

12. Business Customer Data

When you use Waabot to communicate with your customers, you act as the data controller for your customer data. Waabot acts as a data processor. You are responsible for:

• Obtaining proper consent from your customers before messaging them
• Complying with applicable privacy laws regarding your customer data
• Providing appropriate privacy notices to your customers
• Handling customer data requests (access, deletion, etc.)

13. Data Breach Notification

In the event of a data security incident that poses a risk to your personal data, we will notify you and relevant authorities within 72 hours of becoming aware of the breach, as required by applicable law.

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website, through email notification, or other prominent means. Your continued use of our services after such changes constitutes your acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Privacy Officer: privacy@waabot.com
• General Support: support@waabot.com
• Data Protection Officer: dpo@waabot.com