Privacy Policy

1. Information We Collect

1.1 Account Information: name, email address, phone number, business name, industry.

1.2 Conversation Data: when your customers interact with your AI agent via WhatsApp we process phone numbers, message content, timestamps, and conversation metadata (topic, intent, stage).

1.3 Business Data: system prompts, knowledge base documents, appointment types, availability schedules, booking information.

1.4 Usage Data: feature usage metrics, conversation counts, message volumes, AI token consumption, for billing and service improvement.

1.5 WhatsApp Data: through the WhatsApp Business API (provided by Meta Platforms, Inc.) we receive sender phone numbers, message content, message types, delivery status; accessed solely to provide the AI agent service on your behalf.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our AI agent service
• Process and respond to WhatsApp messages on behalf of your business
• Schedule and manage appointments through our calendar system
• Generate AI responses using third-party language models
• Track usage for billing purposes
• Send follow-up messages to your leads as configured
• Provide customer support
• Comply with legal obligations

3. Data Sharing and Third Parties

We share data with these third-party services strictly to provide our Service:

• Meta Platforms (WhatsApp Business API) for message delivery and receipt
• OpenAI for AI response generation (message content is sent for processing)
• Supabase for database hosting and authentication
• Railway for application hosting
• Vercel for dashboard hosting
• Upstash for message queue processing

We do not sell your personal information or your customers' data to any third party.

4. Data Retention

• Account data: retained while your account is active and for 30 days after deletion.
• Conversation data: retained while your account is active.
• Knowledge base data: retained while your account is active.
• Usage metrics: retained for 12 months for billing purposes.

You may request deletion of your data at any time by contacting privacy@heysetter.com.

5. Data Security

We protect your data with:

• Encryption in transit (HTTPS/TLS)
• Row Level Security (RLS) ensuring tenant data isolation
• Authentication via secure session tokens
• Service role separation between frontend and backend

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for data processing

To exercise any of these rights, contact privacy@heysetter.com.

7. Meta Platform Data

In compliance with Meta Platform Terms:

• We only use WhatsApp data to provide the AI agent service you have configured
• We do not use WhatsApp data for advertising purposes
• We do not share WhatsApp data with third parties except as necessary to provide our Service (as listed in Section 3)
• Upon request, we will delete all data obtained through WhatsApp APIs

You may request deletion of your Meta platform data at any time. We provide a data deletion callback at: https://setterapi-production.up.railway.app/api/meta/data-deletion

8. Data Deletion Callback

When a user removes our application or revokes permissions through Meta, we receive a data deletion callback. Upon receipt we:

• Acknowledge the request with a confirmation code
• Process the deletion within 30 days
• Remove all WhatsApp conversation data associated with the user
• Provide a status URL for verification

9. Children's Privacy

Our Service is not directed to individuals under 18. We do not knowingly collect personal information from children.

10. International Data Transfers

Your data may be processed in servers located in the United States. By using our Service, you consent to such transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

BigBang Goals, Inc.

• Email: privacy@heysetter.com
• Website: heysetter.com