Privacy and personal data

Identity and roles

WELL SOFTWARE LLC provides WAAPS and acts as the relevant controller for WAAPS accounts, subscription relationships, support and security. Company and contact details appear below.

For enquiries and visitor messages collected by a customer's website, that business determines purposes and scope; WAAPS processes the information to provide the service. The business must give its visitors suitable notices. This policy does not replace each customer's own website privacy notice.

Information that may be processed

This may include account/contact details, business briefs, uploaded text/logos/images, site drafts, AI requests and responses, usage history, subscription records, payment references and invoices. Depending on enabled features, enquiries, visitor messages and support correspondence may also be processed.

The microphone is used only when you start a recording. Audio is sent for transcription; the transcript may be saved in your brief history. The application server is not designed to retain raw recordings as permanent audio files. The transcription provider's processing terms also apply.

Access to the marketing website may involve IP addresses, request times, browser and security information processed by infrastructure providers. Storing full card numbers or CVCs in WAAPS's database is not part of the service; when live payments open, the relevant processor handles card fields.

Purposes and legal grounds

We process information to provide your account and requested service, generate/publish websites, offer support, manage subscriptions, troubleshoot and prevent abuse. Depending on applicable law, grounds include entering into or performing a contract, legal obligations, establishing or defending rights and, where appropriate, legitimate interests.

Where optional processing requires consent, it is obtained separately. Browser microphone permission is not blanket consent to all data processing. Marketing consent is not a mandatory condition of opening an account or using the service.

Providers and international processing

Infrastructure may use Hetzner and Cloudflare; briefs/audio may use Google Cloud; generation and AI operations may use model providers selected through OpenRouter. Relevant inputs are shared to the extent needed for the operation. Models and processing vary; we do not promise all data is processed in one country.

When enabled, Stripe/PayPal handle payments, Resend notifications, DomainNameAPI domains and ResellerClub email provisioning. Not every provider receives data in every operation. Selling personal data or advertising profiling is not the purpose of this service.

Processing and transfers outside Türkiye may occur. You may request information about recipients, purposes and transfers. Flows requiring transfer arrangements and disclosures under applicable law will not open to general use before those are completed. This policy alone is not a standard contractual clause, processing agreement or transfer safeguard.

Retention and deletion

Account/site data is retained in connection with the service relationship and relevant purposes. Brief sessions are created with a default 30-day duration. Customer enquiries default to 24 months; visitor conversations default to 12 months from the last message. Authorised business administrators can change supported retention settings.

Cancelling a subscription and deleting a site/account are separate operations. Deletion requests are assessed against identity, job state, technical dependencies and legal retention requirements. Records needed for security, disputes or law are retained for those purposes; backup removal may follow separate cycles.

Your rights and requests

Depending on applicable law, you may have rights to access, information, correction, deletion, restriction, objection, portability and withdrawal of consent. Scope and identity are verified proportionately and applicable legal response periods apply.

For a form or message sent to a business's website, that business may be the controller. You can request appropriate direction. Your right to complain to a competent supervisory authority is preserved. The support channel can receive privacy requests once activated.

Contact the operator

WAAPS is provided by WELL SOFTWARE LLC. Use the designated support address for account, billing, cancellation and privacy requests. Include your account email and an invoice or transaction reference where relevant; never send passwords, full card details or API keys.

support@waaps.com.tr