Privacy policy

Woozi is a brand operated by Hashmi Tonmoy, sole trader (entrepreneur individuel, EI), trading name extrakt.app, brand Woozi, 54 Rue Diderot, 92600 Asnières-sur-Seine, France (see the legal notice). For any question or request about your data: tonmoy@woozi.cloud, or by post to the address above.

• Controller, for the users of Woozi accounts (the professional and their team), visitors of www.woozi.cloud and people on the waitlist.
• Processor, for the clients of the businesses that use Woozi: people who message them on WhatsApp, Instagram or Messenger or who book with them. The business is then the controller, and we act on its instructions under the data processing agreement (DPA).

If you are a client of a business that uses Woozi, contact that business first; you can also write to us and we will help it respond (see Clients who message or book).

• Account: name, email address, password (stored hashed by our authentication provider), profile photo if any, team role, invitations (stored as a hash of the link).
• Confirmation of professional use and acceptance of the CGV and this policy, with their date and the document version.
• Business settings: name, time zone, context and rules given to Woozi AI, services, hours, locations, knowledge base.
• Meta connection credentials (WhatsApp number, Facebook Page or Instagram account identifiers, access tokens): tokens are encrypted (AES-256-GCM) and never returned to a browser or written to logs.
• Billing: plan, seats, subscription status and Stripe identifiers. Card details are entered at Stripe and never reach us.
• Technical data: IP address (rate limiting and abuse prevention), server logs, error reports.

• Contacts: name or profile name, phone number or Meta identifier, email, company, tags, custom fields, notes, pipeline stage, marketing consent as recorded by the business.
• Conversations: text messages, images, videos, documents and voice messages, with their dates and delivery statuses. Media received on WhatsApp, voice messages included, is copied to our private storage so it stays available after it expires at Meta. Voice messages are not transcribed and are not sent to the AI.
• Bookings: see the next section.

For broadcasts, the in-app tool sends only to contacts the business has marked as consenting; the business remains responsible for collecting and proving that consent.

This section is for people who message a business that uses Woozi, or who book with it in the conversation or on its booking page (/b/…).

• What is collected: your name, your phone number (your WhatsApp account's, or the one typed in the form), your email (required on the booking page, optional in the conversation), the service, location, date and time chosen, your messages (voice included) and anything you type in the booking form, and the booking's status (code, confirmation, attendance).
• The business is the controller of this data; Woozi acts on its behalf. The first time an appointment is confirmed in the conversation, the assistant tells you your data is used to manage the booking.
• Messages are sent to you on the business's behalf: a booking confirmation by email (sender "business name via Woozi") and in the conversation, reminders 24 hours and 4 hours before the appointment by email and, when the conversation is open, on WhatsApp, slot offers if you are on a waitlist, and, if the business turned it on, a Google review request after the appointment.
• On the booking page, a Cloudflare Turnstile anti-bot check verifies the request comes from a person; Cloudflare receives your IP address and a technical token for this. Your IP address is also used to limit the number of requests (these traces are erased after about 2 hours). You confirm your booking by sending a code on WhatsApp or clicking a link sent by email.
• A past or cancelled booking is deleted automatically after the period the business chose (24 months by default).
• To exercise your rights (access, correction, erasure, objection), contact the business, for example by replying to its confirmation email; you can also write to tonmoy@woozi.cloud, and we will pass your request to the business and help it respond.

If you join Woozi's waitlist, we record your name, email, business name and type, your optional answers about your WhatsApp and Meta use, whether you agreed to be contacted on WhatsApp, and where your visit came from (utm parameters in the address). We send you a welcome email, then an email when we open. This data is kept until you ask to be removed ("Leave the list" link in the email, or tonmoy@woozi.cloud).

• Providing the service (inbox, AI, bookings, automations, broadcasts, notifications): performance of the contract.
• Security, abuse and fraud prevention, including stopping one email address from getting several free trials: legitimate interest.
• Billing and accounting duties: legal obligation.
• Support and fixing faults: performance of the contract and legitimate interest.
• Waitlist emails and WhatsApp messages if you agreed to them: your request and your consent, which you can withdraw at any time.

For data processed for businesses, the legal basis is set by the business. We do not sell personal data and do not use conversation content to train an AI model.

When the AI assistant is on, the conversation's latest messages (text, button choices, media captions; not voice messages or locations), the business's context and the results of booking tools are sent to the AI provider the business chose, Anthropic or OpenAI, to write the reply. For most accounts these calls go through Woozi's account with the provider; an account using its own key goes through its own account. Searching the business's knowledge base uses OpenAI to index the documents and the client's latest message.

Authorised members of the Woozi team can view account information for support. They can open a conversation's content only for support or security, and every opening is recorded (who, when, which conversation); if recording fails, the conversation does not open.

Only with the providers the service needs. The detailed list (role, country, safeguards) is in the data processing agreement:

• Supabase: database, authentication (including signup confirmation and password reset emails) and file storage, hosted in the European Union (Ireland).
• Vercel: application hosting (United States).
• Meta: WhatsApp, Messenger and Instagram, through which every message passes; and, while WhatsApp is being connected, Meta's JavaScript SDK, which may send Meta technical events about that session.
• Anthropic and OpenAI: AI replies and knowledge-base search (United States).
• Stripe: payments and billing.
• Resend: sending the other emails (invitations, email changes, alerts, booking emails to businesses' clients, waitlist) (United States).
• Google: sign-in with Google, and the business-name search used to set up review requests.
• Sentry: error tracking, European Union region (Germany), with the user's and account's technical identifiers, no name or email.
• Cloudflare: Turnstile anti-bot check on the booking page and the waitlist form.
• Browser push services (Google, Apple, Mozilla): push notifications on the devices of team members who turned them on (contact name and the start of the message).

We may also disclose data where the law requires it, or to establish or defend legal claims.

The database is hosted in the European Union. Some providers (Vercel, Anthropic, OpenAI, Resend, Cloudflare, Google, Meta, Stripe) may process data in the United States or elsewhere. These transfers rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's standard contractual clauses. You can ask us which mechanism applies to a given provider.

• Contacts, conversations, messages, media and settings: as long as the account exists. There is no automatic deletion after a set time; after a subscription or trial ends, the account and its data are kept until its owner deletes it or asks us to.
• Deleting a contact erases its conversations and messages, its waitlist entries and its review requests. Its bookings are kept, unlinked from it, until their automatic deletion. Media files from its conversations stay in storage until the account is deleted; we erase them on request.
• Past or cancelled bookings: deleted automatically after the period the business chose (24 months by default, adjustable).
• Raw data received from Meta (webhooks), kept for diagnosis: 30 days.
• IP address traces for rate limiting: about 2 hours.
• Invoices and billing data: 10 years, as French accounting law requires.
• Waitlist: until you ask to be removed.

Account deletion: when the owner deletes the account (Settings), its contacts, conversations, messages, bookings, automations and files (media, automation files, logos) are erased immediately. Kept are:

• users' sign-in identities (the owner's password is invalidated; they can return only by resetting it from their own inbox);
• the email address that used a free trial, with no other data, indefinitely, to stop repeat trials, never used for marketing;
• the list of WhatsApp business numbers already connected to Woozi, indefinitely, for the same reason;
• the confirmations of professional use and acceptance of the CGV, as evidence;
• staff access logs and administration action logs, and the internal signup notification (which contains the email);
• profile photos and screenshots attached to bug reports, which we erase on request.

Our hosts' backups are erased on their own cycle.

• Meta access tokens and AI provider keys encrypted (AES-256-GCM) with a key held outside the database.
• Account isolation at the database level (row-level security).
• Public API keys stored as hashes, shown once.
• Encrypted traffic (TLS); signature checks on incoming webhooks.
• Private storage for conversation media.
• Staff access to conversation content recorded, as described above.

If a breach affects your data, we notify the people concerned and the CNIL as the law requires, and customer businesses as set out in the DPA.

• A session cookie that keeps you signed in (up to 400 days without signing out), and temporary cookies (10 minutes) while connecting to Meta.
• A one-year cookie that remembers you skipped the setup wizard.
• The browser's local storage for interface preferences (theme, sidebar, columns, dismissed banners, last sign-in method).
• Session storage for where your visit came from (utm parameters in the address), sent with a waitlist signup, and to detect the installed app.
• Cloudflare Turnstile on the booking page and the waitlist form, and Meta's SDK while connecting WhatsApp, as described above.

We use no advertising cookies, no third-party audience measurement and no marketing pixels.

You have the right of access, correction, erasure, restriction, objection and portability, the right to withdraw consent, and the right to set directions for your data after your death (article 85 of the French Data Protection Act).

To exercise them: tonmoy@woozi.cloud. We answer within one month, extendable by two months for a complex request; we may ask you to prove your identity. For a customer business's data, see Clients who message or book.

You can lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at cnil.fr, or with the authority of your country of residence in the European Economic Area.

Woozi is a professional tool not aimed at children. If you think data about a child under 15 has reached us, write to us and we will delete it.

We may update this policy. The date and version are at the top of the page; a material change is notified to account holders and must be accepted at the next sign-in.