Privacy Policy
Last updated: October 20, 2026
WAWin consists of a browser extension for WhatsApp Web, WAWin Console and our website. This policy explains how we collect, use, share and protect your information when we provide these services. We do not sell your personal information or use it for advertising.
1. Information we collect
We collect only the information needed to provide the features you use. WhatsApp message content is not uploaded automatically; it is processed only when you use or turn on the relevant features, such as translation, AI or chat sync. Our website uses Google Analytics only with your consent. The extension and Console do not use analytics or advertising cookies; Console uses only the cookies needed to keep you signed in.
| Category | When collected | Purpose | Recipients |
|---|---|---|---|
| Website analyticsPages visited, referral sources, browser and device information, approximate location, interactions and cookie identifiers. | Only after you allow analytics on wawin.ai. | Understanding visits and improving our website. | WAWin, Google. |
| Account informationEmail address, sign-in sessions, workspace memberships and roles, email addresses entered when inviting members, plan and usage. | When you sign up, sign in or use the services. | Verifying your identity, controlling access, team collaboration and billing. | WAWin; sign-in and notification emails are sent through Resend. |
| Payment informationPlan, number of seats and billing email address. Card details are collected directly by Stripe; we never have access to your full card number. | When you purchase or manage a subscription. | Processing payments and subscriptions. | WAWin, Stripe. |
| Customer details and quick repliesPhone numbers of the people you chat with, and customer names, fields, tags, notes, assignees and scheduled follow-ups; quick reply text and attachments. | When you view chats in WhatsApp Web, or create, import or edit records. | Displaying and maintaining customer details, scheduling follow-ups and reusing replies. | WAWin; workspace members with the relevant permissions. |
| Translation and AI rewriteText to be translated or rewritten, and related instructions. | When you use translation or AI rewrite. | Translating messages and rewriting broadcast messages. | WAWin, OpenAI. |
| AI PilotRecent chat messages, customer details, knowledge base content, and image and voice messages. | When you turn on AI Pilot or use AI replies or the knowledge base. | Generating suggested or automatic replies, recognizing images and voice messages, and searching the knowledge base. | WAWin, OpenAI. |
| Chat syncChats, messages and attachments. | After you turn on chat sync. | Viewing, searching and collaborating on chats in Console. | WAWin; workspace members with the relevant permissions. |
| Broadcasts and scheduled messagesTask settings, recipients, message text and files. | When you create and run tasks. | Sending messages through WhatsApp Web according to your settings. | Stored mainly in your browser; messages are sent to recipients through WhatsApp. |
| External integrationsCustomer details, messages and events within the scope you authorize. | When you connect an MCP client, use an API key or set up a Webhook. | Providing data to the apps you authorize. | The apps or Webhook URLs you authorize. |
| Logs and diagnosticsActivity records, request logs (such as IP addresses) and error information. | When you use the services. | Keeping the services running and secure, measuring usage and troubleshooting problems. | WAWin, Cloudflare. |
Website analytics
Pages visited, referral sources, browser and device information, approximate location, interactions and cookie identifiers.
- When collected
- Only after you allow analytics on wawin.ai.
- Purpose
- Understanding visits and improving our website.
- Recipients
- WAWin, Google.
Account information
Email address, sign-in sessions, workspace memberships and roles, email addresses entered when inviting members, plan and usage.
- When collected
- When you sign up, sign in or use the services.
- Purpose
- Verifying your identity, controlling access, team collaboration and billing.
- Recipients
- WAWin; sign-in and notification emails are sent through Resend.
Payment information
Plan, number of seats and billing email address. Card details are collected directly by Stripe; we never have access to your full card number.
- When collected
- When you purchase or manage a subscription.
- Purpose
- Processing payments and subscriptions.
- Recipients
- WAWin, Stripe.
Customer details and quick replies
Phone numbers of the people you chat with, and customer names, fields, tags, notes, assignees and scheduled follow-ups; quick reply text and attachments.
- When collected
- When you view chats in WhatsApp Web, or create, import or edit records.
- Purpose
- Displaying and maintaining customer details, scheduling follow-ups and reusing replies.
- Recipients
- WAWin; workspace members with the relevant permissions.
Translation and AI rewrite
Text to be translated or rewritten, and related instructions.
- When collected
- When you use translation or AI rewrite.
- Purpose
- Translating messages and rewriting broadcast messages.
- Recipients
- WAWin, OpenAI.
AI Pilot
Recent chat messages, customer details, knowledge base content, and image and voice messages.
- When collected
- When you turn on AI Pilot or use AI replies or the knowledge base.
- Purpose
- Generating suggested or automatic replies, recognizing images and voice messages, and searching the knowledge base.
- Recipients
- WAWin, OpenAI.
Chat sync
Chats, messages and attachments.
- When collected
- After you turn on chat sync.
- Purpose
- Viewing, searching and collaborating on chats in Console.
- Recipients
- WAWin; workspace members with the relevant permissions.
Broadcasts and scheduled messages
Task settings, recipients, message text and files.
- When collected
- When you create and run tasks.
- Purpose
- Sending messages through WhatsApp Web according to your settings.
- Recipients
- Stored mainly in your browser; messages are sent to recipients through WhatsApp.
External integrations
Customer details, messages and events within the scope you authorize.
- When collected
- When you connect an MCP client, use an API key or set up a Webhook.
- Purpose
- Providing data to the apps you authorize.
- Recipients
- The apps or Webhook URLs you authorize.
Logs and diagnostics
Activity records, request logs (such as IP addresses) and error information.
- When collected
- When you use the services.
- Purpose
- Keeping the services running and secure, measuring usage and troubleshooting problems.
- Recipients
- WAWin, Cloudflare.
2. Website cookies and analytics
We use a necessary cookie to remember your chosen language for one year. We store your analytics choice in your browser’s local storage for 180 days. These preferences do not require analytics consent.
Google Analytics is optional. Before you agree, or if you refuse, we do not load Google Analytics or send it analytics data. Refusing does not affect website features. We do not use this data for advertising and have disabled Google signals and ad personalization.
After you agree, Google Analytics cookies help distinguish visits and measure website use. These cookies last no longer than 180 days and expire by the end of your saved consent period. The page URL sent to Analytics omits query parameters and fragments; the referring URL is limited to its origin.
You can allow or refuse analytics at any time through “Cookie settings” in the footer. Withdrawing consent stops future collection and deletes this website’s Analytics cookies; it does not automatically erase data already collected. Your choice applies to this browser on this device. Clearing browser storage or reaching the 180-day expiry means you will be asked again.
3. Extension permissions
| Permission | Purpose |
|---|---|
| storage | Saves your sign-in status, settings, cached translations, follow-up reminders, and broadcast and scheduled message tasks. |
| unlimitedStorage | Attachments for broadcasts and scheduled messages, and data waiting to sync, may exceed Chrome’s default storage limit. |
| notifications | Alerts you to customer follow-ups that are due, AI Pilot conversations that need a person to take over, and scheduled messages that need your attention. |
| alarms | Checks follow-up reminders and scheduled messages in the background at the scheduled times. |
| Access to web.whatsapp.com | Runs the extension’s features in WhatsApp Web. |
| Access to WAWin Console and the API | Completes sign-in and exchanges data with the WAWin servers. |
4. How we use information
We use the information above to provide and maintain the features you turn on, verify your identity and manage access, process payments, send verification codes and service notices, keep the services secure and prevent abuse, measure usage and troubleshoot problems, and respond to your questions and requests.
We do not use your data to train our own AI models, and we do not use it for advertising, profiling unrelated to the services, credit assessments or lending. We may use aggregated, anonymized data that cannot identify any individual to improve the services.
5. Translation and AI processing
When you use translation, AI rewrite or AI Pilot, the relevant text, images or voice messages are sent through the WAWin servers to third-party model providers for processing. This processing is not covered by WhatsApp’s end-to-end encryption. These features need to send the required content even when chat sync is off.
When we call model providers, we turn off their option to store conversation history. Providers may still retain data for a short period under their own policies for safety and abuse monitoring. To avoid repeated processing, translations are cached in your browser and your workspace. AI Pilot keeps a run history so you can review it and troubleshoot problems.
6. How we share information
We share your personal information only in the following cases:
Service providers: Alibaba Cloud (server hosting), Cloudflare (network access and security protection), Resend (email delivery), OpenAI (translation and AI features) and Stripe (payment processing). Providers receive only the information needed to provide their services and may process data outside your country or region.
Google also processes website analytics data when you consent, and may process it outside your country or region.
Workspace members: Members of the same workspace can access shared customer details, chats and knowledge base content according to their roles.
Third parties you authorize: MCP clients you connect, apps that use your API key and Webhook URLs you set up can receive data within the scope you authorize.
Legal requirements and safety: We may disclose information to the extent necessary to comply with laws, regulations, legal process or government requests, or to protect the safety of our users, the public or WAWin.
7. Chrome Web Store data use commitment
WAWin’s use of data obtained through the extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.
8. Storage and security
Consented website analytics data is processed and stored by Google separately from our application servers.
Application data on our servers is stored on Alibaba Cloud servers, and some extension data is stored in your browser. Data is encrypted in transit with HTTPS between the extension, Console and our servers, and access to data is restricted by account authentication and workspace roles.
Please keep your devices, browser and account secure. No method of storage or transmission can guarantee absolute security.
9. Retention and deletion
We keep your information for as long as needed to provide the services. Customer details, quick replies, knowledge base content and synced chats are kept until you or a workspace admin deletes them, or until the workspace is deleted. AI Pilot run history and Webhook delivery records are deleted automatically after a fixed period.
Data stored in your browser is kept until you uninstall the extension or clear your browser data. Cached translations of incoming messages are cleared automatically on a regular basis.
After deletion, copies in backups and logs may be kept for a period of time and remain protected by access controls. For security audits and legal requirements, some activity records are kept even after an account or workspace is deleted.
10. Your rights and choices
At any time, you can turn off automatic translation, AI Pilot or chat sync, disconnect external integrations, clear cached translations in your browser, or delete your account in Console. When you turn off a feature, it stops processing new data, but data it has already stored is not deleted automatically.
Subject to applicable law, you may request to access, correct, export or delete your personal information, or to restrict or object to our processing of it. To protect your data, we may need to verify your identity first.
If your information is managed by a WAWin workspace (for example, because you are a customer of that workspace), please contact the party that manages the workspace. We will help them handle your request.
11. Minors’ privacy
WAWin is intended for users aged 18 and over and is not directed to anyone under 18. We do not knowingly collect personal information from minors. If we learn that we have collected such information, we will promptly delete it.
12. Changes to this policy
We may update this policy to reflect changes to our product features or to laws and regulations. We will post the revised version on this page with the date it was updated.
13. Contact us
WAWin is operated by AKUTORI Co., Ltd. If you have any questions about this policy or your data, or would like to exercise the rights described above, please email support@wawin.ai.