Privacy Policy | Wakily AI

1. Who We Are

Wakily AI (“Wakily”, “we”, “our”, “us”) provides an AI-powered customer messaging automation platform for e-commerce businesses. Our service is accessible at wakily.ai. This policy explains what data we collect, why we collect it, and how we protect it.

2. Data We Collect

Account data — email address and password (stored securely via Supabase Auth).
Business configuration — business name, product descriptions, delivery info, tone, and FAQ entries you enter in the Agent settings.
Conversation data — messages exchanged between your customers and the AI agent on connected platforms (Messenger, Instagram, WhatsApp).
Platform connection tokens — OAuth access tokens for Meta pages/accounts you connect. These are encrypted at rest.
Usage data — credit consumption, API call logs, and feature usage to operate and improve the service.
Payment data — billing is handled entirely by Lemon Squeezy. We never store card details.

3. How We Use Your Data

Operate and deliver the AI messaging service you subscribed to.
Generate AI responses on behalf of your business using your agent configuration.
Track credit usage and enforce plan limits.
Send transactional emails (billing receipts, service alerts). We do not send marketing emails without your explicit consent.
Improve model quality and service reliability using anonymized, aggregated usage signals.

4. Third-Party Services

We share data with the following trusted processors only as needed to provide the service:

OpenAI — processes conversation messages to generate AI replies. OpenAI's data usage policy applies.
Meta (Facebook) — messages are received and sent via the Meta Graph API for Messenger, Instagram, and WhatsApp.
Supabase — authentication and database hosting (EU/US infrastructure).
Lemon Squeezy — payment processing and subscription management.
Neon — PostgreSQL database hosting.

We do not sell your data to any third party.

5. Data Retention

Conversation history is retained for up to 90 days to power conversation context. Account data is retained for the lifetime of your account. Upon account deletion we purge all personal data within 30 days, except where retention is required by law.

6. Your Rights

Depending on your jurisdiction you may have the right to:

Access, correct, or delete your personal data.
Export your data in a portable format.
Withdraw consent for non-essential processing.
Lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at privacy@wakily.ai.

7. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.

8. Security

All data is transmitted over TLS. Access tokens and secrets are encrypted at rest. Access to production data is restricted to authorized personnel only.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the dashboard at least 14 days before they take effect.

10. Contact

Questions about this policy? Contact us at privacy@wakily.ai.