Security and privacy
The product reads your conversations to find who went unanswered. That only works with clear rules about what we store, for how long, and what never happens without your say-so. It's all here, no fine print.
It's the same connection you use when you open WhatsApp in a browser: you scan a QR code with your phone and the session is linked to your number. We never ask for your password, we don't use third-party unofficial APIs for bulk sending, and we don't take over your account.
Message content that passes through our server is encrypted with AES-GCM before it's written, with a key that lives only in the server environment. Connection tokens are never stored in plain text. Traffic is always HTTPS.
Message records are deleted automatically after 90 days. We keep the minimum needed to spot who went unanswered — we don't build a permanent archive of your conversations.
The AI drafts the follow-up; sending it is your click. There's no automated bulk sending, and no message leaves your number without you reading and approving it first.
There's a risk, and it would be dishonest to say otherwise: any tool connected to WhatsApp outside the official app can draw the attention of Meta's anti-abuse systems. What lowers that risk is behavior — which is why the product is built the way it is: no bulk sending, no automated blasts, no messages to people who never talked to you. You reply to conversations that already exist, at your own pace, with manual approval.
One session per number, no simultaneous connections; sending only to contacts who have already exchanged messages with you; no batch-send triggers; and a natural volume ceiling, because every follow-up goes through your approval. If the connection drops, we tell you instead of retrying in a loop.
We don't use your conversations for routine human reading or for training models. Content is processed automatically to spot pending follow-ups and draft suggestions.
Yes. Disconnecting the number ends the session immediately, from your own phone or from the dashboard. On request, we delete your data; anything not deleted sooner falls under the automatic 90-day retention.
For your contacts' data, you are the controller and we are the processor: we handle it only on your instruction and for the purpose of the service. We handle access, correction and deletion requests through the contact channel, and we maintain a legal basis, data minimization and a defined retention period. This applies under the GDPR in Europe and the UK, and under Brazil's LGPD.
