Privacy Policy

WACOS is a trading name operated in the United Kingdom. We provide a WhatsApp AI assistant service for car detailing businesses. References to "we", "us" or "our" in this policy refer to WACOS.

Contact us at: hello@wacos.co.uk

We collect the following categories of personal data:

• Account data — your name, email address and business details when you sign up.
• WhatsApp message data — messages sent to your WhatsApp Business number by your customers, processed solely to generate reply drafts on your behalf.
• Voice profile data — WhatsApp chat exports you upload to train the AI on your writing style.
• Calendar data — appointment and availability information from your connected Google Calendar.
• Billing data — payment information is handled by Stripe and is not stored on our servers.
• Usage data — anonymised analytics about how the dashboard is used.

• To provide the WACOS service — generating AI draft replies and managing bookings on your behalf.
• To send service-related notifications (trial expiry, billing receipts).
• To improve the product using aggregated, anonymised usage analytics.
• To comply with legal obligations.

We do not sell your data or your customers' data to any third party.

We process your personal data under UK GDPR on the following bases:

• Contract — processing necessary to deliver the service you have signed up for.
• Legitimate interests — analytics and product improvement, where this does not override your rights.
• Legal obligation — where required by applicable law.

When your customers message your WhatsApp number, their messages are processed by WACOS on your behalf. You are the data controller for your customers' data. We act as a data processor. You are responsible for ensuring your customers are aware that you use AI-assisted tools to manage WhatsApp communications.

• Anthropic — message content is sent to Claude API to generate draft replies.
• Meta (WhatsApp) — messages are received and sent via the WhatsApp Cloud API.
• Clerk — authentication and user account management.
• Stripe — payment processing.
• Google — calendar integration.
• Sentry — error monitoring (anonymised technical data only).

All third parties are contractually bound to process data only for the stated purpose.

We retain your account data for as long as your account is active, plus 90 days after deletion. WhatsApp message history is retained for 12 months and then deleted. You can request earlier deletion by emailing us.

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, email hello@wacos.co.uk.

We use a strictly necessary session cookie for authentication and an optional analytics cookie if you consent. No advertising or tracking cookies are set. Manage your preferences via the banner shown on your first visit.

We will update this policy when our practices change. Significant changes will be notified by email. Continued use after changes take effect constitutes acceptance.