Last Updated: October 4, 2026
At Whappy, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains our practices regarding the collection, use, and disclosure of your information when you use our WhatsApp automation platform and related services.
Whappy Inc. A Delaware corporation 2045 Connecticut Ln Sewickley, PA 15143 United States EIN: 35-2899311
Contact Details: Email: team@whappy.ai Contact Person: Alessandro Voltan Phone: +34644132664
When you interact with our Service, you may provide us with:
Our systems automatically gather:
When you use the assistant inside the Whappy dashboard, we keep what you write to it and its replies for 30 days, so we can find and fix mistakes in its answers. They are then deleted automatically. Only Whappy staff can read them, and they never include the messages your leads send you.
For each answer we also keep, for 90 days, a technical record of what the assistant did (which actions it took and whether they worked, never the text of the conversation) and, if you gave one, your rating (thumbs up or down) and comment.
We may receive information about you from:
When you connect a CRM to Whappy, you decide what it may read and what it may write, and both are limited to the one sub-account you connect.
What we read. Contacts and their tags, so a new or newly tagged contact can start a WhatsApp conversation. The custom fields defined on that sub-account, so you can choose which of them an answer belongs in. Calendars and their free slots, so the assistant offers times that are genuinely available. Pipelines and their stages, so you can choose where a finished conversation leaves the deal. We never read your CRM's own inbox or its conversations.
What we write. Nothing, until you switch each part on. Once you do: the conversation transcript as a note on the contact, the outcome as a tag, each answer in the custom field you mapped it to, appointments on the calendar you chose, and the opportunity in the stage you picked.
How long we keep it. CRM-sourced data lives under the same retention as the rest of your account and is deleted with it. Disconnecting the CRM stops all reading and writing immediately; deleting your account removes what we hold.
Our role. Your CRM is a source and a destination, not a sub-processor of ours. We do not send your CRM data to it on our own behalf, and we do not use one customer's CRM data to serve another.
When you connect a Shopify store, the Whappy app reads from that store only what it needs to message the customers who agreed to it, and you decide which store events start a conversation.
What we read. Customers who agreed to WhatsApp marketing in Shopify: their name, email and phone number, their Shopify tags, and changes to their consent. Abandoned checkouts (cart contents, total and recovery link) and recent orders (order number, date, items, total, status and tracking) of those customers, so a conversation can follow up a checkout or answer "where is my order?". We do not read addresses. Customers without WhatsApp marketing consent never become leads.
What we write. Nothing in your store. Whappy only reads.
How long we keep it. Abandoned checkouts 30 days, recent orders 90 days. Leads created from the store follow the rest of your account. When Shopify forwards a buyer's request for their data, we email the store owner an export of it (download link valid 7 days, file deleted after 30 days); when it forwards a deletion request, we anonymise that buyer's leads and conversations. After you uninstall the app, everything we received from the store is purged when Shopify asks us to, 48 hours later.
Our role. For your customers' data we are your processor, under our Data Processing Addendum. We do not use it to train AI models and do not use one store's data to serve another.
We use your information to:
We may share your information with:
We never sell your personal information to third parties for marketing purposes.
We implement industry-standard security measures to protect your information, including:
While we take significant precautions, no system is completely secure. We encourage you to use strong passwords and secure your account.
Depending on your location, you may have rights to:
To exercise these rights, contact us at team@whappy.ai. We'll respond to your request within the timeframe required by applicable law.
As a global company, we may transfer your information to countries other than where you live. When we do, we ensure appropriate safeguards are in place to protect your information and comply with applicable data protection laws.
We use cookies and similar technologies to:
You can manage cookie preferences through your browser settings, though this may affect certain Service features.
Our Service is not intended for children under 16, and we do not knowingly collect their personal information. If we discover we've collected data from a child under 16, we will promptly delete it.
We may update this Privacy Policy as our services evolve or as laws change. We'll notify you of material changes through email or notices within our Service before they become effective.
California residents have additional rights under the CCPA and CPRA. Nevada residents can opt out of the sale of covered information.
For users in the EEA, UK, or Switzerland, we act as the data controller for your personal information and process data according to GDPR requirements.
If you have questions or concerns about this Privacy Policy or our data practices, please contact:
Privacy Officer: Alessandro Voltan Email: team@whappy.ai Phone: +34644132664 Address: Whappy Inc., 2045 Connecticut Ln, Sewickley, PA 15143, USA
If you have an unresolved privacy concern, you may contact our third-party dispute resolution provider at https://feedback-form.truste.com/watchdog/request.