Privacy policy

What this website collects

This site uses Google Analytics to count page views and to see which pages lead people to start an account. It sets a first-party cookie holding a random identifier for your browser, so that two visits from you are not counted as two different people. It is not your name, we never send Google anything you have typed, and the identifier is not joined to anything you do inside the product.

There is no advertising or retargeting pixel on any page, and there never has been. Google's advertising features are switched off here at the source rather than left unused: the tag is loaded with advertising storage, advertising signals and personalisation all denied, so nothing measured on this site can be used to follow you around another one or to build an audience to advertise to.

You can refuse all of it. Any browser setting or extension that blocks Google Analytics blocks this, and nothing on this site behaves differently when it is blocked. Every page works with the tag missing, because it is loaded after everything else and no content waits on it.

If you book a demo, the calendar is our own booking system and you give it your name, email and any detail you choose to type. We use it to hold the call and to follow up at most three times. One click unsubscribes, and we do not sell or share the list.

What the product processes

Inside WAOversight, our customer is the data controller and we are the processor. They decide which company-owned numbers to link and what to do with the archive; we hold it and make it searchable. The detail of that relationship is in the data processing agreement.

What the product processes on a linked number:

• Messages sent and received, including their content, timestamps, and whether they were deleted or edited.
• Attachments (images, documents, voice notes), stored encrypted.
• The phone numbers and display names of the people in those conversations.
• Metadata needed to keep the link working, including session state and connection health.

It does not process anything else on the phone. No location, no contacts list, no call logs, no other applications. There is no software installed on any device.

Who else sees it

Our infrastructure providers, in the ordinary way that any hosted product depends on them: cloud hosting and storage, a transactional email provider for notifications, and a payment processor for billing. Card details go directly to the payment processor and never reach our servers.

If a workspace owner switches on AI assessments, the text of that workspace's CRM-matched customer conversations is also processed by DeepSeek, as a sub-processor, as described on the security page.

We do not sell data, we do not share it with advertisers, and we do not use customer conversation content to train anything.

How long we keep it

Archive retention is set by the customer, per workspace, and defaults to 12 months. It applies from the date each message was captured. The record of who accessed what is kept longer than the messages themselves, three years by default, because an audit trail that expires before the thing it audits is not an audit trail. On cancellation, the archive remains exportable for 30 days and is then deleted.

Website form submissions are kept for 24 months unless you ask us to remove them sooner, which you can do by writing to us.

Your rights

If you are a visitor, you can ask what we hold about you and ask us to delete it. If you are an employee whose conversations are archived by your employer, the controller is your employer: ask them first, and we will support them in answering. We will not disclose a customer's archive to anyone other than that customer without a lawful order.

Write to [email protected] for anything on this page.