Privacy Policy

1Information We Collect

• Name, email address, and phone number during registration.
• Business information such as trade name, category, opening hours, and knowledge base.
• Messages received through WhatsApp, Instagram, or web chat to operate automated replies.
• Payment, billing, and subscription data processed by Paddle.com as authorized reseller and Merchant of Record. We do not store card numbers.

2How We Use Information

• Provide and operate the AI automation service.
• Process payments and manage subscriptions.
• Generate automated replies in connected channels.
• Send service-related notifications.
• Comply with legal and regulatory obligations.

3Google API Services User Data Disclosure

• The account or primary calendar identifier, available calendar list and names, time zone, and access role, so we can display calendars where you may create events and save your selection.
• Free and busy periods, without reading the contents of existing events, so we can read free and busy availability to avoid overlapping appointments and offer available times to your customers.
• Information required to create, update, or schedule appointments requested by your customers and managed by what-o: date, time, title, description, event identifier, and event link.
• Granted scopes, connection date, and OAuth refresh token, so the authorized connection can operate while you are away from the dashboard.

4Google User Data Policy and Limited Use

• We use Google Calendar data only and exclusively to provide and improve user-facing features: check availability, create or manage appointments requested by your customers, display the selected calendar, and maintain the authorized connection. We do not use Google data for any other purpose.
• The refresh token is stored encrypted. Access tokens are used temporarily and are not retained as permanent credentials. Availability is processed to answer and coordinate an appointment; appointment details and the event identifier are retained as operational service records.
• We do not sell or transfer Google data, and we do not use it for advertising, commercial profiling, or to create, train, or improve artificial intelligence or machine learning models, whether our own or third parties'. Nor do we share it with third parties for their own purposes.
• To compose the scheduling reply, only derived availability (free/busy ranges converted into time slots) is sent to our AI providers. We never read or send the contents, title, attendees, or description of your existing events. Our AI providers are Google Gemini (paid-tier API, which does not use the data to train models), Groq, and OpenAI, all under contractual terms that prohibit using this data to train or improve their models. We do not use AI services under plans that would use this data for training.
• what-o's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5Google Calendar Control, Revocation, and Deletion

You can disconnect Google Calendar in Assistant settings or revoke what-o from your Google Account permissions page. When disconnected, we attempt to revoke the token and remove the refresh token, associated account, granted scopes, and calendar selection from our systems. Events already created remain in Google Calendar, and local appointment records are retained under this Policy's general periods or until a valid deletion request.

6Data Sharing

We do not sell or rent personal information. We share data with necessary providers: Clerk for authentication, Paddle for payments, taxes, receipts and subscriptions, Meta for WhatsApp/Instagram, and AI providers (Google Gemini paid tier, Groq, and OpenAI) to process messages and generate replies. These AI providers do not use the data to train their models. Data derived from Google Calendar is shared only in the minimal form described in the 'Google User Data Policy and Limited Use' section and never for model training.

7Storage and Security

• TLS encryption in transit.
• Restricted access controls.
• HMAC verification for Meta webhooks and signature verification for Paddle webhooks.
• Asynchronous processing and rate limits to prevent abuse.

8Data Retention

We keep data while your account is active. If you cancel your subscription, data is retained for 30 days before deletion unless legal obligations or specific requests require otherwise.

9Your Rights

• Access your personal data.
• Correct inaccurate information.
• Request deletion or portability.
• Withdraw consent where applicable.

10International Transfers

Data may be processed by providers outside your country of residence. We aim to work with providers that apply appropriate protection standards.