Privacy Policy

1. Introduction

Welcome to Wabot (“we,” “our,” or “us”), a WhatsApp automation and AI-powered messaging platform operated by Team Fames Sdn Bhd (“Company”).

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our services, including:

• The Wabot web application and dashboard (available at https://app.wabot.my and https://app.wabot.io)
• Our WhatsApp automation and bulk messaging tools
• Our AI chatbot and knowledge base features
• Our embeddable AI chat widget
• Our Telegram integration
• Any related mobile applications, APIs, or services (collectively, the “Service”)

By accessing or using Wabot, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Service.

2. Who This Policy Applies To

This policy applies to:

• Registered users (individuals and businesses who create a Wabot account)
• End users (contacts and customers whose phone numbers or messages are processed through Wabot on behalf of our registered users)
• Visitors to our website

Note for End Users: If you have received a WhatsApp or Telegram message sent via Wabot, your data is processed by one of our business customers. You should also review that business’s privacy policy for information specific to their data practices.

3. Information We Collect

3.1 Account and Registration Information

When you register for a Wabot account, we collect: full name, username, email address, phone number, password (stored in hashed/encrypted form — we never store plain-text passwords), timezone preference, profile avatar/image, referral or URL parameters used during sign-up, and IP address at the time of registration.

3.2 WhatsApp and Messaging Data

When you connect a WhatsApp account or use our messaging features, we process: WhatsApp phone numbers and account identifiers; contact names and phone numbers in your contact lists; message content (text, images, audio, video, documents) sent and received through the platform; message delivery and read status; WhatsApp group names, descriptions, and participant lists; WhatsApp profile names and profile pictures of contacts; message templates and bulk campaign content.

We process this data on behalf of our users (as a data processor) in connection with the Meta WhatsApp Business Platform. All use of WhatsApp data is subject to Meta’s Platform Terms and WhatsApp Business Policy.

3.3 Telegram Messaging Data

When you connect a Telegram account or use our Telegram integration, we process: Telegram chat IDs and account identifiers; message content sent and received via Telegram; bot interaction data.

3.4 AI Chatbot and Knowledge Base Data

When you use our AI features (AI Playground, chatbot automation, or knowledge base features), we process: documents, files, and URLs you upload to the knowledge base; website content scanned during knowledge base setup; chat conversation history between your AI chatbot and end users; AI-generated responses and queries; search indexes derived from your knowledge base content; AI usage information (such as request counts and estimated usage costs); feedback submitted on AI responses. This data may be transmitted to third-party AI service providers (see Section 6).

3.5 Payment and Billing Information

When you subscribe to a paid plan, we collect: subscription plan details; transaction IDs and payment amounts; payment history records. We do not store full credit card numbers or raw payment credentials. Payment processing is handled by our third-party payment processors.

3.6 Media and Uploaded Files

Files you upload or that are transmitted through the Service, including images, audio, video, and documents shared via WhatsApp or uploaded to the knowledge base. Media files are stored with cloud storage providers and processed on our systems where necessary.

3.7 Usage and Technical Data

We automatically collect: IP address; browser type and version; operating system; pages visited, features used, and actions taken within the dashboard; login timestamps and session data; error logs and diagnostic information; device identifiers.

3.8 Google Integration Data

If you connect a Google account for integrations (e.g., Google Sheets), we may access: Google account email address and profile information (with your consent); Google Sheets content you authorize for use with automated messaging; OAuth tokens (stored securely and used only for authorized integrations).

3.9 Location Data

We may collect approximate geographic location derived from IP addresses for account security, fraud prevention, and analytics purposes. We do not collect precise GPS location.

4. How We Use Your Information

We use your information to provide and operate the Service; authenticate and secure your account; send WhatsApp and Telegram messages on your behalf; power AI chatbot and knowledge base features; process payments and manage subscriptions; store and deliver media files; provide customer support; send service notifications and updates; monitor platform performance and prevent abuse; comply with legal obligations; and improve and develop the Service (including aggregated, anonymized usage analytics). We do not sell your personal information to third parties.

5. Legal Basis for Processing (GDPR)

If you are located in the EEA, UK, or similar jurisdiction, we process your personal data on the bases of: contractual necessity; legitimate interests (operate, secure, and improve our platform; prevent fraud and abuse); consent (where required for social logins, optional integrations, marketing); and legal obligation.

6. Third-Party Services and Data Sharing

We may share or transmit certain data to third-party services. Each provider has its own privacy policy.

6.1 Meta / WhatsApp Business Platform

Wabot integrates with the Meta WhatsApp Business API. Message content and contact data are transmitted to and from Meta’s infrastructure. Your use is subject to Meta’s Terms of Service, WhatsApp Business Policy, and Meta’s Privacy Policy.

Meta Privacy Policy · WhatsApp Business Policy

6.2 Google

We use Google reCAPTCHA, Google Sheets integration, and Google OAuth (when enabled). Google Privacy Policy

6.3 Push Notification Providers

We use push notification providers to send notifications to registered users where applicable.

6.4 AI Service Providers

When you use AI features, queries and context may be transmitted to third-party AI providers. If you use your own API keys (“BYOK”), data is transmitted to the provider you choose.

6.5 Cloud Storage Providers

Media files may be stored with third-party cloud storage providers.

6.6 Telegram

If you enable Telegram integration, data is transmitted to Telegram’s infrastructure. Telegram Privacy Policy

6.7 Infrastructure and Hosting Providers

Managed databases, caching, queues, search/indexing, and hosting providers may process your data to operate the Service.

6.8 Other Disclosures

We may share data with your consent; for legal compliance; for safety and fraud prevention; in a business transfer (with notice); and with service providers under data processing agreements.

7. Data Retention

Data Type	Retention Period
Account information	Duration of your account, plus up to 90 days after deletion
WhatsApp message logs	As configured by you in your account settings
AI conversation history	Duration of your account; deletable by you at any time
Knowledge base documents	Until you delete them; removed upon account termination
Payment records	As required by financial and tax regulations (typically 7 years)
System logs and diagnostic data	Up to 90 days
Backups	Up to 30 days after deletion

You may request deletion of your account and associated data by contacting us at support@wabot.my.

8. Data Security

We implement industry-standard measures including: encryption in transit (TLS/HTTPS); password hashing; secure session tokens; access controls and account isolation; API authentication; infrastructure security updates. No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at support@wabot.my.

9. Your Privacy Rights

9.1 GDPR Rights (EEA / UK)

Access, rectification, erasure, restriction, portability, object, and withdraw consent where applicable.

9.2 CCPA Rights (California)

Know, delete, opt out of sale (we do not sell personal information), and non-discrimination rights.

9.3 PDPA Rights (Malaysia)

Rights under the Personal Data Protection Act 2010, including access and correction.

9.4 How to Exercise Your Rights

Email: support@wabot.my · WhatsApp: +60125153307. We respond within 30 days and may verify your identity.

10. Cookies and Tracking Technologies

We use session cookies, optional persistent cookies (“Remember Me”), Google reCAPTCHA, and server-side logging. Google Tag Manager (GTM) is enabled only when the site’s NEXT_PUBLIC_GTM_ID deployment environment variable is configured with a GTM container ID. When enabled, GTM may load configured advertising and analytics tags. Our custom events do not include personally identifiable information such as names, email addresses, phone numbers, message content, or authentication values; they use limited fields such as CTA identifiers, locale, destination, and the page path without query parameters. Whether consent or other controls are required for these tags is determined by Wabot’s privacy and legal owners according to applicable law and policy. You can control cookies through your browser settings.

11. Children’s Privacy

Wabot is a B2B platform intended for users at least 18 years of age (or age of majority). We do not knowingly collect personal information from children under 13 (or under 16 in the EEA). Contact us if you believe a child has provided personal information.

12. International Data Transfers

Your data may be transferred to and processed in countries with different data protection laws. We use appropriate safeguards and contractual protections where required.

13. Meta Platform Compliance

We use WhatsApp data to provide the messaging and automation services you request. We do not use WhatsApp user data for unrelated purposes or advertising targeting. We minimize data collection, and our customers are responsible for consent where required. We comply with Meta Platform Terms, WhatsApp Business Policy, and Meta’s Data Use Policy.

14. Google Play Store and Google Ads Compliance

We comply with Google Play Developer Program Policies and Google’s User Data Policy where applicable; reCAPTCHA use is governed by Google’s terms.

15. Apple App Store Compliance

We comply with App Store Review Guidelines and privacy disclosure requirements where applicable. Data types may include contact info, user content, identifiers, usage data, and diagnostics — not used for tracking as described in our App Store disclosures.

16. Automated Decision-Making

We do not use your personal data for automated decisions with legal or similarly significant effects without human involvement. AI responses are delivered under your configuration and control.

17. Third-Party Links

Our Service may contain links to third-party sites. We are not responsible for their privacy practices.

18. Changes to This Privacy Policy

We may update this policy from time to time. We will update the “Last Updated” date and may notify registered users by email or in-app notification for material changes.

19. Contact Us

Company Name: Team Fames Sdn Bhd
Email: support@wabot.my
Website: https://wabot.io
Mailing Address: 1-2, Jalan Puteri 2A/8, Bandar Puteri Bangi, 43000 Kajang, Selangor

For GDPR-related inquiries, you may contact our Data Protection Officer (DPO) at support@wabot.my.

You may lodge a complaint with your local data protection authority (EEA/UK), the FTC (US), or the Department of Personal Data Protection (JPDP) (Malaysia).

---

This Privacy Policy was last reviewed on 11 March 2026 and covers all Wabot services and features currently in operation.

WhatsApp and WhatsApp Logo are brand assets and trademark of WhatsApp Inc. Team Fames Sdn Bhd is not in partnership, sponsored or endorsed by WhatsApp Inc.