Privacy, in plain words.

Here is exactly what we collect, what we never touch, and what you can control.

The one-line version: your personal chats on your own phone stay personal. We process only business conversations under the rules you set, your data is yours to export or delete, and we never sell it.

1. Who we are

AutoDM ("we", "us") provides an AI-powered WhatsApp sales assistant for businesses. This policy explains what data we collect through our website and app, why we collect it, and what we do with it.

For questions about this policy or your data, contact us at hello@seunajiboye.com.

2. What we collect

Vendor identity: your name, email address, business name and login credentials (passwords are stored only as cryptographic hashes).

WhatsApp connection data: your business phone number and the technical identifiers and tokens needed to send and receive messages on your behalf. Connection tokens are treated as credentials: encrypted at rest and never displayed in full.

Messages: conversations between you and your customers that the assistant processes. Where you enable Privacy Mode, personal messages that fall outside your business rules are never read by the AI, never stored with their content, and never shown on your dashboard. Only a content-free count is kept for 90 days so your dashboard can show how many messages were filtered.

Optional chat history: only if you explicitly opt in, we may sync recent chat history (up to 6 months) to build your own customer context. We do not sync your phone contacts.

Business data: your catalog, orders, invoices, subscription and promo records.

Payments: payment references and amounts processed through Paystack. Card details never touch our systems; checkout happens on Paystack's hosted page.

3. What we never see

Group chats, voice calls and Status updates are never accessible to AutoDM. This is a platform-level guarantee of the WhatsApp Business Platform.

Personal messages filtered by your Privacy Mode settings are never read by the AI, never stored with content, and never visible on your dashboard.

We do not sell your data, and we do not use your business data to train third-party AI models.

4. How we use data

To run your shop: process customer messages, generate replies, manage catalog, orders and payments.

To provide support and prevent fraud or abuse.

To send service updates (billing, security, product changes). Marketing messages only with your consent.

Legal bases under the Nigeria Data Protection Act: performance of a contract (running your shop), legitimate interest (security, abuse prevention), and consent (optional history sync and marketing).

5. Who we share data with (sub-processors)

Meta (WhatsApp Business Platform): message delivery. Meta operates the platform through which messages flow.

Google (Gemini AI): generates assistant replies for messages processed under your settings.

Paystack: payment processing.

Cloud hosting providers: infrastructure for the app and database.

We share only what each provider needs to perform its function, under contractual confidentiality and data protection terms.

6. Your choices and rights

You control Privacy Mode: decide whether the assistant handles messages or only messages from numbers on your allow list, and change it at any time.

You can export or delete your business data on request, and disconnect your WhatsApp number, which stops all message processing immediately.

You can request access, correction, or deletion of your personal data at any time by emailing hello@seunajiboye.com. Where we process data on behalf of your own customers, requests from them route through you, and we provide the tooling to fulfil them.

7. Retention

Message content is retained while your account is active and for as long as needed to provide the service. Privacy Mode filter counts are kept 90 days, then deleted.

If your subscription lapses, your data remains exportable for a grace period, after which inactive accounts are scheduled for deletion.

Connection tokens are deleted as soon as you disconnect a number.

8. Security

Credentials and connection tokens are encrypted at rest. Passwords are stored as hashes. All traffic runs over TLS.

Access to production data is restricted to authorized team members and audited.

9. Changes and contact

We will notify you of material changes to this policy in-app or by email before they take effect.

Effective date: September 2026. Contact: hello@seunajiboye.com.

Questions about your data? We answer fast.

Contact us