Privacy Policy

• Account data: your name, email address and profile picture from Google Sign-In, plus your timezone and locale.
• Contact data: the WhatsApp number you link, and the pairing metadata needed to maintain that link.
• Content data: WhatsApp messages, media, transcripts, contacts and group information that your assistant reads in order to work, plus tasks, notes, wiki entries and memory files it creates for you.
• Connected service data: only what you authorise — for example calendar events, email messages, or files in a connected drive.
• Billing data: subscription status, invoices and the last four digits of your card. Full card details are held by our payment provider, never by us.
• Technical data: minimal request metadata required to operate and secure the service.

We do not keep activity logs or product telemetry of what you do inside your assistant. The only exception is feedback you deliberately submit, which is recorded and visible to you.

We do not sell personal data, and we do not share it with advertisers or data brokers.

• To provide the service you asked for — performance of our contract with you.
• To keep the service secure and prevent abuse — our legitimate interests.
• To bill you and meet tax and accounting obligations — legal obligation.
• To send you service notices. Marketing email is sent only with your consent, and you can withdraw it at any time.

Each user's assistant runs in its own isolated environment. Content data is encrypted at rest using a key derived with HKDF from a master key held in a managed key store and a random salt unique to your account. The derived key is not persisted, and identical content encrypts to different values for different users.

Data in transit is protected with TLS. Access to production infrastructure is restricted, logged at the infrastructure level, and requires multi-factor authentication.

To generate responses, content may be sent to third-party AI providers acting as our processors under contract. We have opted out of model training on our data with these providers, and they are not permitted to use it for their own purposes.

• Cloud hosting and container infrastructure.
• AI model providers for inference and speech-to-text.
• Payment processing.
• Transactional email and push notification delivery.
• Error monitoring on our control plane (excludes your message content).

We keep your content for as long as your account is active. If your subscription lapses, your data is retained through the pause and wind-down period so that it can be restored if you return.

When you delete your account, content data is deleted from live systems promptly and purged from backups within 30 days. Records we must keep for tax and legal reasons are retained for the statutory period.

You can access, correct, export and delete your data. Much of this is self-service: ask your assistant to forget something, edit your memory files directly, or use the Danger Zone in the dashboard to disconnect WhatsApp and delete your account.

Where the GDPR or India's Digital Personal Data Protection Act applies, you additionally have rights to restrict or object to processing, to data portability, to withdraw consent, and to complain to your supervisory authority or the Data Protection Board of India.

Your WhatsApp conversations contain personal data about other people. You are responsible for using the service lawfully in respect of them. We process that data only as needed to run your assistant, never to build profiles for our own purposes, and it is deleted along with your account.

We prefer infrastructure regions close to you and use the Indian region where available. Where data is transferred outside your jurisdiction, we rely on appropriate safeguards such as Standard Contractual Clauses.

The service is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has used the service, contact us and we will delete the account.

If a breach affects your personal data, we will notify you and the relevant authority without undue delay and within the timeframes required by applicable law. Suspected vulnerabilities can be reported to us and are triaged ahead of other work.

We will post updates on this page and notify you of material changes through the service or by email before they take effect.

Write to KKHS Media Private Limited, 190A Krishna Kunj, Kalwar Road, Jaipur, Rajasthan, India, email [email protected], or call +91 97820 05500 during Mon – Sat, 10:00 AM – 7:00 PM IST.