Legal & Trust

Privacy Policy

Protecting your shoppers' trust is built into Towasal's AI agent—from WhatsApp voice notes to Instagram DMs and order receipts.

Updated November 2024 Applies to Towasal AI Sales Agent

We only process the data required to automate commerce conversations, fulfill orders, and surface insights—you stay the owner of every conversation and catalog item.

1. Data we collect

We collect only the signals needed to operate and improve Towasal. Data is ingested from secure WhatsApp Business and Instagram Graph APIs, your dashboard inputs, and optional uploads.

Conversation signals: inbound and outbound messages, reactive templates, attachments, and voice notes so the bot can reply contextually and log agent actions.
Commerce context: catalog items, inventory levels, price lists, promo codes, payment references, and delivery notes needed for order workflows.
Account metadata: workspace name, billing contacts, teammates, IP/session data for security, and audit logs of feature toggles.

Optional knowledge uploads (PDFs, URLs, CSVs) are encrypted at rest and tied to the workspace that provided them.

2. How we use information

Data powers the experiences showcased on the landing page—smart replies, inventory sync, payments, and analytics.

Automation & fulfillment: generate answers, surface product cards, raise orders, and trigger invoices across Bronze, Silver, and Gold plans.
Quality and safety: monitor abuse, throttle rate limits, and tune models so bilingual conversations stay accurate.
Insights: aggregate metrics (response time, conversion, retention) so you can make data-driven decisions without exposing individual shoppers.

We never sell conversation data. Training for new AI behaviors is done on anonymized or synthetic corpora, not on your private threads.

3. Sharing & retention

Access is limited to vetted subprocessors that help us deliver payments, storage, and infrastructure.

Vendors: hosting providers, observability tools, and payment gateways under written agreements aligned with GDPR and local telecom rules.
Platform owners: WhatsApp and Instagram receive data per their APIs when we send messages or templates on your behalf.
Legal requests: we may disclose data to comply with law or to defend Towasal and our merchants, after notifying you when allowed.

Chat transcripts are stored for the life of your contract plus 90 days for export; billing and audit data may be retained longer to satisfy regulatory requirements.

4. Your controls & contact

You can export, update, or delete workspace data anytime from Settings or by emailing privacy@towasal.io. We honor regional rights (GDPR, CCPA, PDPL) and help you respond to shopper requests.

Questions? Reach us at privacy@towasal.io or through the WhatsApp support shortcut inside the dashboard.