Privacy Policy

Womnibot (womnibot.com) helps businesses talk to their customers on WhatsApp. This policy explains what we collect, why, and your choices. Questions: [email protected].

Who is responsible for what

For account data (people who sign up to Womnibot), we are the controller. For customer conversations that a business handles through Womnibot, the business is the controller and we process that data on its behalf and on its instructions.

What we collect

• Account data: name, email address, password (stored only as a secure hash) and, if you sign in with Google or Facebook, the basic profile those services share (name, email, profile picture).
• Workspace data: business name, team members and roles, connected WhatsApp numbers, settings, templates, API keys (stored hashed) and webhook configurations.
• Messaging data processed for businesses: WhatsApp contacts' phone numbers and profile names, message contents and attachments, delivery status and opt-in records.
• Technical data: IP address, browser, and logs needed for security, abuse prevention and troubleshooting.

How we use it

• To provide the service: sending and receiving WhatsApp messages, the team inbox, routing, reports, the API and webhooks.
• To secure the service: authentication, rate limiting, audit logs and fraud or abuse prevention.
• To support you: when you ask for help, and to operate and improve the product.

We don't sell personal data and we don't use conversation contents for advertising.

Who we share it with

• Meta Platforms (WhatsApp Business Platform), to deliver messages you send and receive.
• Infrastructure providers that host and protect the service (for example our cloud server and Cloudflare).
• Google or Facebook, only if you choose to sign in with them.
• Google (Analytics and Ads) and Meta (Pixel), for measuring our own website and ads, as described under Cookies below.
• Authorities, when required by law.

Cookies and analytics

Our website uses cookies that are needed to keep you signed in. With your consent, we also use Google Analytics, the Google Ads tag and the Meta Pixel to understand how visitors use our website and which of our ads work, for example counting page visits and sign-ups. Until you accept, Google tags run in a cookieless mode and the Meta Pixel does not load. We never use your WhatsApp conversations, contacts or message content for advertising or analytics. You can change your choice at any time by clearing this site's data in your browser, which brings the choice back.

Access by our staff

Womnibot administrators can see account-level information (workspaces, members, numbers, usage counts) to operate the service. For support or security investigations, an administrator may temporarily sign in as a user. This is limited to 30 minutes, requires a recorded reason, and every such access is logged.

Retention and deletion

We keep data while your account or workspace is active. Businesses can delete contacts and conversations. You can ask us to delete your account and associated data at any time. See Data deletion. Backups are overwritten on a rolling basis.

Security

Data is encrypted in transit. WhatsApp access tokens and webhook secrets are encrypted at rest; passwords and API keys are stored only as hashes. Access within a business workspace is limited by role.

Your rights

Depending on where you live you may have rights to access, correct, delete, export or object to processing of your personal data. If your data is in a business's conversations, contact that business first; we will help them respond. To exercise your rights with us, email [email protected].

Changes

We'll update this page when our practices change and note the date above.