Draft for a lawyer to review
Privacy notice
This is a placeholder privacy notice, written with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) in mind. A lawyer must review it before it is used with real customers.
Who is responsible
Relay.chat (legal name to be set), address in Mexico to be set. Privacy email: privacy@getrelay.chat.
Data we collect
- Your email, for the account and to tell you if the WhatsApp session disconnects.
- The Stripe customer and subscription ids, so we can charge 10 USD a month per number. Stripe handles the card. Relay.chat does not store it.
- The WhatsApp session state (linked or disconnected) and, once it is linked, the number and name WhatsApp reports.
- API usage counts: how many messages were sent, not the text. Keys are stored only as an irreversible hash. Webhook secrets are stored encrypted.
- Which assistant you approved, which number it may use, and whether it may send. We store a hash of its access token, not the token itself.
What we do not store
Chat contents are not archived in the Relay.chat database. When your assistant asks for messages, we ask WhatsApp at that moment and pass them on. We do not copy them into our own history. The program that holds the session (WAHA) does keep the session on the server disk while the subscription is active. When you cancel, that session is closed.
Why we use it
To provide the service, charge the subscription, tell you if the session disconnects, and apply limits that reduce the chance WhatsApp blocks your number.
Who else receives it
Stripe, for payment. The WhatsApp link runs on the server where you or Relay.chat hosts WAHA. We do not sell your data.
Your rights
You can ask for access, correction, cancellation, or to object, and you can withdraw consent, by writing to privacy@getrelay.chat. You can also cancel a subscription from My account, revoke keys, and disconnect an assistant.