1. Information we collect
Depending on how you use the service, we may process account and business information such as your name, email address, company or organization name, business/WhatsApp phone number, country, website, business type, account verification state and acceptance timestamps for our policies.
Workspace data may include contacts you upload, phone numbers, tags, consent status and consent source, campaign configuration, templates, conversation records, automation settings, audit events, usage data, support requests and provider connection metadata.
2. Credentials and security data
Passwords are stored as password hashes rather than plaintext passwords. Provider access tokens are designed to be stored encrypted when the application encryption key is configured. Browser sessions use protected session cookies. Encrypted database backups may contain account and workspace data.
3. Why we use information
We use information to create and secure accounts, verify email addresses, operate workspaces, enforce usage and anti-abuse limits, process requested messaging workflows, provide support, maintain backups, diagnose service issues and comply with applicable legal or provider requirements.
4. Transactional account emails
We may send operational emails needed to provide and secure the service, including email verification, welcome/onboarding messages, password reset and password-change notices, team invitations, workspace approval or suspension notices, usage-limit alerts and support acknowledgements. These messages may include your name and business or workspace name so you can identify the relevant account.
Password reset and email verification links use random one-time tokens. The application stores hashes of those tokens and expiry timestamps rather than storing the usable reset or verification link token in plaintext.
5. Customer contact data
Workspace owners are responsible for having an appropriate basis and permission to upload and message their contacts. We provide consent fields, suppression controls and opt-out handling to help users manage those responsibilities, but users remain responsible for the lawfulness of their own contact lists and messages.
6. Service providers and integrations
Data may be processed by infrastructure and services you or the platform operator connect, such as web hosting, email delivery, Meta/WhatsApp Business Platform, Chatwoot or other integrations. Those services may have their own privacy terms.
7. Retention and backups
We retain information while it is needed to operate the service, protect accounts, maintain audit and safety records, or satisfy legitimate operational or legal needs. Encrypted backups may persist for the configured backup-retention period after primary data changes.
8. Your choices and requests
You may ask to access, correct or delete account information, subject to applicable law and legitimate security, fraud-prevention, audit, billing or legal retention needs. Signed-in users can use Settings → Your data & account to download a JSON export that excludes passwords, session tokens and encrypted provider credentials, or to submit a review-based deletion request. See the Data & Account Deletion page for details. If you cannot sign in, use the Contact page.
9. Children
This business messaging service is not designed for children to create business accounts.
10. Changes
We may update this policy as the product, providers or legal requirements change. The latest version will be published on this page with an updated date.
Optional marketing email preferences
Product updates, educational guides and promotions are optional. We record the categories you select, subscription/confirmation timestamps and unsubscribe status. Turning off optional emails does not disable necessary account, verification, password-reset or security messages.
Email campaign records
Platform administrators may use the Email Campaigns feature for genuine service notices and for optional product updates, newsletters, guides or promotions. We may store campaign subject/body, schedule, audience category, recipient snapshot, delivery result and suppression status. Optional campaign recipients are selected from current consent preferences and those preferences are checked again immediately before sending.
Service and maintenance notices may be sent to verified account owners when reasonably necessary to operate the service. Optional marketing categories remain separately subscribable and unsubscribable.
Customer-acquisition attribution
When you submit a demo or agency-partner request, or when a registration link contains campaign parameters, we may store the originating SemiOffice page, UTM campaign parameters and external referrer hostname with the lead or account. We use this first-party attribution to understand which pages and campaigns produce real signups and product activation. We do not need your WhatsApp contact list for this attribution and we do not sell this attribution data to advertisers.