Privacy Policy

Last updated: June 10, 2026

Important: WhatsApp AI Agents is built around artificial intelligence. When you use our product, your WhatsApp conversations and related content are sent to third-party AI services so the product can read, summarize, generate replies, build automations, and run agents. By using the service, you consent to this processing.

This policy describes how WhatsApp AI Agents (“we”, “us”, “the service”) collects, uses, stores, and shares information when you connect your WhatsApp account, use our web app, automations, AI agents, or the ChatGPT integration.

We are an independent product. We are not affiliated with, endorsed by, or sponsored by WhatsApp LLC or Meta Platforms, Inc.

1. What data we access

When you link WhatsApp (QR login), we access data needed to operate the service, including:

Your WhatsApp phone number and connection status
Chat list metadata (contact/group names, previews, timestamps, unread counts)
Message content — text, and metadata about messages (sender, time, chat id)
Media you choose to open or process through the service (e.g. images attached to messages)
Account settings, workflow/agent configurations, and API keys you create

2. Third-party AI services (core disclosure)

We send user conversation data to third-party AI providers. This is required for the product to function. Depending on which features you use, message text and chat context may be transmitted to:

OpenAI (ChatGPT)

If you connect a Custom GPT using our ChatGPT integration and API key, chat names, message text, and related context returned by our API are processed by OpenAI as part of your ChatGPT session. OpenAI’s use of that data is governed by OpenAI’s policies and your OpenAI account settings.

OpenRouter and underlying model providers

Our in-app AI features — including the agent builder, workflow automations, live AI replies, agent v4, and related tools — send prompts and WhatsApp message content to OpenRouter, which routes requests to third-party language models (for example Xiaomi Mimo and other models configured on our servers). Those providers process the content to generate responses. Their handling of data is subject to their own terms and privacy policies.

Other service providers

Email (Resend) — if you add a backup email, we may send account alerts through Resend.
Hosting — our servers and databases store session data and message indexes needed to run the service.

We do not sell your WhatsApp conversations to data brokers. We share content with AI and infrastructure providers only as needed to provide the features you use.

3. How we use your data

Display your chats and messages in the app
Run AI agents, automations, and workflows you configure
Generate draft replies and builder suggestions
Serve the ChatGPT integration when you authorize it with an API key
Enforce rate limits, prevent abuse, and maintain security
Send operational alerts (e.g. disconnect notices, usage limits)

4. What we store

On our servers: account record, workflow/agent configs, hashed API keys, usage counters, lightweight API audit logs (action type, chat id, timestamp — not full message bodies in GPT audit logs)
On the linked session (daemon): WhatsApp session credentials and a local message index/history used to list and fetch chats
Cache: optional lightweight chat metadata cache (names, previews) — not a full copy of all message history in our database

5. ChatGPT integration

When you use our published Custom GPT AgentBridge Chat (OAuth sign-in, not API keys):

You authorize ChatGPT to call our API on your behalf via OAuth
You link your WhatsApp number on the same connect page (QR or phone pairing)
Our API may return chat lists, search results, and message text from your linked WhatsApp
That data becomes part of your ChatGPT conversation and is processed by OpenAI
We log API usage (e.g. list chats, read messages, send) for abuse prevention — not full message bodies in audit logs

Stop using the Custom GPT or revoke access in ChatGPT settings to disconnect. Unlink WhatsApp from your phone under Linked devices. Optional developer API keys (main app only) can be revoked under WhatsApp → Connect to ChatGPT.

6. Your choices

Do not use the service if you do not want WhatsApp content sent to third-party AI providers
Disconnect WhatsApp by logging out / removing the linked session
Revoke ChatGPT API keys at any time
Disable or delete automations and agents you no longer want running
Contact us to request account-related assistance (see below)

7. Security

We use API key authentication, hashed key storage, HTTPS in production, and access controls on our infrastructure. No system is perfectly secure; use strong passwords and protect your API keys.

8. Children

The service is not intended for users under 18.

9. International transfers

Your data may be processed in countries where we or our providers operate (including the United States). By using the service, you consent to this transfer.

10. Changes

We may update this policy. The “Last updated” date at the top will change when we do. Continued use after changes means you accept the updated policy.

11. Contact

Questions or privacy requests: use our contact form (include your WhatsApp number) or open the app at /app.