Draft for legal review. This template is not legal advice and has not been reviewed by a lawyer. It must be reviewed and adapted (including GDPR requirements) before launch.

Privacy Policy

Last updated: [date to be set]

This policy explains how [legal company name] processes personal data in OuskeyWapp AI. For your customers' data, you (the business) are generally the controller and we act as your processor; a Data Processing Agreement (DPA) should be in place.

Data we process

Account data: name, email, authentication data.
Business data: profile, services, FAQs, staff names.
Customer conversation data: phone number, WhatsApp profile name, message contents, details customers share (name, address, preferred times).
Technical data: logs needed to secure and operate the Service.

Purposes and legal bases

[To be completed: providing the Service (contract), security (legitimate interest), legal obligations.]

Sub-processors

[List to be completed, e.g. hosting/database provider, AI model provider, Meta (WhatsApp Business Platform), payment provider.]

International transfers

[Describe any transfers outside the EU/EEA and safeguards used.]

Retention

[Retention periods for conversations, leads and account data.]

Your rights

Under GDPR you may have the right to access, rectify, erase, restrict or object to processing, and to data portability. You may lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Contact

[Privacy contact email / DPO if applicable]