1. Information we collect
We may collect account details such as names, business contact information, authentication identifiers, workspace membership, roles, preferences, and subscription or plan information. The public website may receive basic request information needed to deliver pages securely.
When customers use Wova8 CRM, the service may process customer and contact records, conversation content, message metadata, tags, assignments, notes, deals, workflows, broadcasts, automation events, operational logs, and other information submitted by or for that customer.
2. Usage and technical data
We may process device, browser, IP address, timestamps, page or feature activity, error information, security events, and service-performance data. This information supports authentication, reliability, troubleshooting, abuse prevention, and product operation.
3. Messaging and third-party integrations
When a customer connects a supported service, Wova8 may process integration identifiers, configuration, access credentials or tokens, template information, communication metadata, delivery events, and message content needed to provide the requested workflow. Third-party platforms process information under their own terms and privacy policies.
For WhatsApp Business Platform workflows, the customer is responsible for lawful contact, required notices, consent where applicable, approved templates, messaging rules, and other platform requirements.
4. AI-assisted features
Wova8 CRM may send selected prompts, conversation context, drafts, or related content to the AI provider configured for the customer's account. This processing is used to generate summaries, analysis, rewrites, translations, drafts, or next-action assistance. AI output can be incomplete or inaccurate and should be reviewed by a person before use.
Provider, model, and API-key choices are controlled within the relevant customer account. The provider's own terms and privacy practices may apply to data sent to it.
5. How information is used
- Provide, secure, maintain, and improve the website and services.
- Authenticate users and enforce account, role, and workspace controls.
- Deliver customer-requested CRM, messaging, automation, and AI-assisted functions.
- Provide support, investigate errors, and communicate service information.
- Measure usage, administer plans, and protect against fraud, spam, and abuse.
- Comply with applicable legal obligations and enforce service terms.
6. Legal basis and customer responsibility
The legal basis for processing depends on the context and applicable law. It may include performance of a contract, legitimate interests in operating and protecting the service, consent, or compliance with legal obligations. Customers are responsible for establishing their own lawful basis for customer data they upload or connect.
7. Sharing and service providers
Information may be shared with infrastructure, authentication, database, communication, AI, monitoring, and professional-service providers only as reasonably needed to operate the service. We may also disclose information when legally required, to protect rights and safety, or during a lawful business transaction subject to appropriate protections.
8. Cookies
The public static website is designed to work without analytics or advertising cookies. Wova8 CRM may use essential session and authentication technologies. See the Cookie Policy for current details.
9. Retention
Information is retained for as long as reasonably needed to provide the service, maintain security and records, resolve disputes, enforce agreements, or meet legal obligations. Retention can vary by information type, customer instruction, account status, backup cycle, and applicable law.
10. Security
Wova8 uses administrative, technical, and organizational measures intended to protect service data. No internet service can guarantee absolute security. Customers should protect credentials, configure roles carefully, and report suspected misuse promptly.
11. Rights and choices
Depending on applicable law, individuals may have rights to request access, correction, deletion, restriction, objection, or portability. Requests may require identity and authority verification, especially where information is controlled by a Wova8 customer. See Data Deletion.
12. International processing
Infrastructure and providers may process data in countries other than the user's location. Where required, appropriate contractual or legal safeguards should be used. Specific arrangements may be documented in the customer's written agreement.
13. Children
Wova8 services are intended for business use and are not directed to children. Customers must not knowingly submit children's personal data unless they have a lawful basis, appropriate authority, and any required safeguards.
14. Changes
This policy may be updated as services, integrations, or legal requirements change. The revised version will be posted at this URL with a new update date.
15. Contact
For privacy questions or requests, email support@wova8.com. Include enough information to identify the relevant account or workspace, but do not send passwords, authentication codes, or private API keys.