Privacy Policy
Last updated 2026-09-10 · Operated by the operator of this Wave service
What we collect
- Account data: your name, email, password (stored as a hash), interface language.
- Business data: what you enter about your business (information, FAQs, policies, orders, brand guidelines), your employees and their settings, tasks, content and media you upload.
- Customer conversations: messages received through connected apps (e.g. WhatsApp) and the replies, so employees can work and you can see it.
- Connected-app data: access tokens (encrypted with AES-256-GCM, never displayed), account id and name, and what tools fetch within the permissions you granted.
- Usage and operations: the activity log, token counts and estimated cost of AI calls (never the text of prompts), server logs (path, status, time, IP address) for security.
How we use it
Only to run the Service: executing tasks, replying to customers, showing activity and approvals, sending the notifications you enabled, protecting accounts and preventing abuse. We do not sell your data and do not use it for advertising.
Who we share it with
- The AI model provider (our default or the one you chose): receives task and conversation content to process it.
- The platforms you connect (Meta for WhatsApp and Instagram, Snap, Google/YouTube): under your authorisation and their terms.
- The email provider: to send reset, verification and alert emails.
- The hosting provider: data is stored on our servers there.
Cookies
We use essential cookies only: your sign-in session and your preferred language. No tracking, no advertising.
Retention and deletion
We keep your data while your account exists. You can delete your account from Settings; business data, employees, conversations, content, media and app tokens are deleted immediately. Backups expire within 30 days. See data deletion instructions.
Your rights
You can access and export your data (Settings → Export my data), correct it and delete it. For other requests write to support@wave.example.
Security
Passwords are hashed (scrypt), tokens are encrypted, traffic is HTTPS, and each account's data is isolated from every other account. No system is perfectly secure; tell us immediately if you notice a problem.