Privacy Policy

Last updated: July 2026

1. Information We Collect

We collect information you provide directly to us, including:

  • Account information (email, name, organization details)
  • WhatsApp session data necessary for service operation
  • Message metadata (timestamps, delivery status)
  • API usage logs and analytics
  • Payment information processed through our payment provider

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Send technical notices and support messages
  • Monitor and analyze usage patterns to improve user experience
  • Detect and prevent fraudulent or unauthorized activity

3. Data Storage and Security

Your account data and message content are stored on servers located in the European Union. Some processing takes place outside the EU: our application logs, which can include phone numbers, are processed in the United States and retained for 30 days, and message content may be processed by the AI providers listed in section 6. We implement industry-standard security measures including encryption in transit, database-level tenant isolation (Row-Level Security), and role-based access controls.

4. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Message content is stored according to your plan's retention settings. You can request deletion of your data at any time.

5. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Data portability
  • Withdraw consent at any time

6. Third-Party Services

We use third-party services for payment processing (Stripe), AI-powered message processing, operational logging, and infrastructure. Message content may be processed by Anthropic (primary conversational AI), OpenAI (fallback AI model), and Groq (voice message transcription). Application logs, which can include phone numbers, are processed by Axiom in the United States. These providers process data under their own data processing terms; we do not control their infrastructure location. They have their own privacy policies and we recommend reviewing them.

7. Contact

For privacy-related inquiries, please contact our Data Protection Officer at privacy@akson.ch