Privacy Policy

WhaReply AI (“the Service”) is operated by Algorithm Alchemy Tech (“we”, “us”). It lets businesses (“Business Users”) automate customer conversations on WhatsApp, capture leads, and send quotations. This policy explains what data the Service handles, why, and the choices available to you. It applies to Business Users of the dashboard and to people who message a business that uses the Service (“End Users”).

1. Data we process

From End Users who message a business on WhatsApp:

• Your WhatsApp phone number and the profile name WhatsApp shares with businesses.
• The content of messages you send to the business, including text, selections from menus and buttons, and any images or documents you send (for example, a payment receipt).
• Details you choose to provide during the conversation, such as your name, business name, contact number, email, or requirements for a quotation.
• Records of quotations, orders and payments related to your conversation.

From Business Users of the dashboard:

• Account details: name, email address and a password (stored only as a salted hash).
• Business profile information: business name, contact details, tax registration number, bank details for quotations, logo and payment QR code.
• Content you upload to configure the Service: price lists, product catalogues, knowledge documents and bot-flow settings.
• Technical logs needed to run and secure the Service (request logs, error logs, timestamps).

2. How we use it

• To deliver the conversation on behalf of the business: reply to messages, show product options, generate and send quotations, and record orders and receipts.
• To let the business view and manage its conversations, leads, quotations and orders in the dashboard.
• To generate AI-assisted replies. Message text may be sent to an AI model provider to draft a reply, translate text, or understand intent.
• To operate, secure, troubleshoot and improve the Service.
• To meet legal obligations.

We do not sell personal data and we do not use End User messages for advertising.

3. Service providers we rely on

• Meta Platforms — the WhatsApp Business Platform delivers and receives messages. Meta’s handling of WhatsApp data is governed by its own terms and privacy policy.
• WhatsApp Business Solution Providers — some businesses connect their WhatsApp number through an authorised provider that relays messages between WhatsApp and the Service.
• Google (Gemini) — used to generate AI replies and translations. Only the text needed for the reply is sent.
• Hosting and infrastructure — servers and databases used to run the Service.

Each provider processes data only to provide its service to us and under its own contractual and legal obligations.

4. Retention

• Conversation transcripts are kept for the period the business configures (7 days by default) and are then deleted automatically.
• Leads, quotations, orders and receipts are kept while the business account is active, so the business can service its customers, and removed when the business deletes them or closes its account.
• Business account data is kept for as long as the account exists.

5. Sharing

End User data collected in a conversation is shared with the business you are messaging; they are responsible for how they use it. Beyond that we share data only with the service providers above, when required by law, or to protect the rights and safety of users and the Service.

6. Security

Data is transmitted over encrypted connections, dashboard access requires authentication, passwords are stored hashed, and access to production systems is restricted. No system is perfectly secure; if we become aware of a breach affecting your data we will notify affected users as required by law.

7. Your choices and rights

• End Users: you can stop a conversation at any time, ask the business to delete your details, or contact us at the address below to request access to or deletion of data we hold about you.
• Business Users: you can edit or delete leads, conversations, catalogues and profile details from the dashboard, and request account deletion by contacting us.
• Depending on where you live you may have additional rights under applicable data-protection law; we will honour valid requests.

8. Data deletion requests

To request deletion of your data, email aatfunctions@gmail.com from the address or WhatsApp number concerned, stating which business you interacted with. We will confirm completion within 30 days.

9. Children

The Service is intended for businesses and their adult customers and is not directed at children under 13.

10. Changes

We may update this policy; the date at the top shows the current version. Material changes will be announced in the dashboard.

11. Contact

Algorithm Alchemy Tech · aatfunctions@gmail.com