Privacy Policy

This Privacy Policy explains how WAVO ("we", "us") collects, uses, shares and protects personal data when you use WAVO at https://saferak.com (the "Service"), including our website, web application, APIs and our integration with the WhatsApp Business Platform provided by Meta Platforms, Inc.

If you have any question about this policy, contact us at info@saferak.com.

1. Who we are and our role

WAVO is a customer-communication platform (CRM) that lets businesses talk to their customers over WhatsApp and email from a shared inbox, send approved message templates and campaigns, and run automations.

• For account data (the people who sign up for and use WAVO), we are the data controller.
• For customer data that businesses ("Workspaces") upload or receive through the Service — their contacts, conversations and messages — the Workspace is the controller and we act as a data processor, handling that data only on the Workspace's instructions and to provide the Service.

2. Data we collect

a) Account and workspace data — name, email address, password (stored only as a secure hash), phone number if provided, workspace name, team members and roles, language and display preferences, two-factor authentication settings.

b) WhatsApp Business data (via Meta) — when you connect a WhatsApp Business Account through Meta's Embedded Signup, we receive and store your WhatsApp Business Account ID, phone number ID, display phone number, verified business name, message templates, quality rating and an access token that Meta issues so the Service can send and receive messages on your behalf. We only request the permissions needed to run the Service (such as whatsapp_business_management and whatsapp_business_messaging).

c) Messages and contacts — messages sent and received through your connected WhatsApp numbers and email mailboxes (text, media, documents, locations, interactive replies), delivery and read statuses, and the contact details of the people you communicate with (name, phone number, email address, tags, notes, custom fields and opt-in / opt-out status).

d) Email channel data — mailbox address and the IMAP/SMTP connection settings you enter. Passwords and tokens are encrypted at rest.

e) Integration data — if you connect an online store (such as Shopify or WooCommerce), order, checkout, product and customer information needed for order notifications and catalogs.

f) Billing data — plan, invoices and payment status. Card payments are processed by our payment provider (Kashier); we never store full card numbers — only a token and the last digits the provider returns.

g) Technical data — IP address, browser and device type, log records, security events and cookies needed to keep you signed in (see our Cookie Policy).

3. How we use data

We use personal data only to:

1. Provide, operate and maintain the Service — delivering your WhatsApp and email messages, showing your inbox, running campaigns, automations and chatbots you configure.
2. Create and secure your account, authenticate you and prevent fraud and abuse.
3. Process subscriptions and payments.
4. Send service messages (account verification, password reset, billing and security notices).
5. Provide support and respond to your requests.
6. Comply with legal obligations and with Meta's WhatsApp Business policies.
7. Improve the Service using aggregated, non-identifying usage statistics.

We do not sell personal data, we do not use WhatsApp message content for advertising, and we do not use data received from Meta for any purpose other than providing the Service to you.

4. Optional AI features

If a Workspace enables AI reply suggestions, the text of the relevant conversation and the Workspace's knowledge base are sent to our AI provider (Anthropic) only to generate a suggested reply. Suggestions are reviewed by a human before sending. The provider does not use this data to train its models under our agreement. The feature is off unless a Workspace turns it on.

5. Legal bases

Where the GDPR or similar laws apply, we rely on: performance of a contract (providing the Service), legitimate interests (security, fraud prevention, improving the Service), legal obligation (tax, accounting, lawful requests) and consent where required (for example, optional cookies). Workspaces are responsible for having a valid legal basis — including the recipient's opt-in required by WhatsApp — before messaging their contacts.

6. Sharing and sub-processors

We share data only with service providers that help us run the Service, under confidentiality and data-protection terms:

Provider	Purpose
Meta Platforms, Inc. (WhatsApp Business Platform)	Sending and receiving WhatsApp messages
Hostinger	Hosting, databases and email delivery
Kashier	Payment processing
Anthropic	Optional AI reply suggestions
Your connected stores / mail providers	Integrations you choose to connect

We may also disclose data if required by law, to protect rights and safety, or as part of a merger or acquisition (with notice to you).

7. International transfers

Our providers may process data outside your country. Where required, we rely on appropriate safeguards such as standard contractual clauses.

8. Retention

We keep account data while your account is active. Conversations and contacts are kept for as long as the Workspace keeps them or until the Workspace is deleted. After an account or Workspace is deleted, we delete or anonymize its data within 30 days, except where we must keep limited records (for example invoices) to meet legal obligations. Backups are overwritten within 30 more days.

9. Security

We use encryption in transit (HTTPS/TLS), encryption at rest for access tokens, passwords and channel credentials, hashed user passwords, optional two-factor authentication, strict separation between Workspaces, role-based access and audit logs.

10. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. To exercise these rights, email info@saferak.com. If your data was uploaded by a business that uses WAVO, please contact that business first; we will assist them.

You can also delete your account yourself — see our Data Deletion Instructions.

11. Children

The Service is intended for businesses and is not directed to children under 18. We do not knowingly collect data from children.

12. Changes

We may update this policy. We will post the new version on this page with a new "Last updated" date and, for significant changes, notify account owners by email or in the app.

13. Contact

WAVO Email: info@saferak.com Website: https://saferak.com