Privacy Policy

The operator of the WoneAssistant service (“WoneAssistant”, “we”, “us”) is the data controller for the personal data described in this policy — including accounts, purchases, and use of this website. You can reach us at [email protected] for any privacy question or request.

If you use WoneAssistant through an organization, that organization is the controller for the communications and activity in its account, and its privacy notice applies there. Where we process personal data on a customer’s behalf — such as call recordings and transcripts of that customer’s callers — we act as the processor on the customer’s instructions.

• Account data: name, email address, password hash, organization and role information when you register or are invited.
• Billing data: billing name, email, country, and transaction identifiers. Card details go directly to Stripe; we never see or store full card numbers.
• Service data: your configuration, assistants and call journeys, phone numbers, contact lists, and the communications content the platform handles for you — calls, recordings, transcripts, and messages.
• Usage and metering data: minutes, message counts, and feature usage needed to bill quotas and operate the service.
• Support data: messages you send us and the diagnostics you choose to share.
• Technical data: IP address, browser and device information, and server logs used for security and troubleshooting.

For users in the EEA/UK, we rely on the GDPR legal bases noted below:

• Provide and operate the service — creating accounts, running assistants and call routing, metering usage (performance of a contract).
• Process payments and prevent fraud — via Stripe (performance of a contract; legitimate interest).
• Secure the service — logs, abuse and fraud detection, access monitoring (legitimate interest; legal obligation for communications security).
• Communicate with you — service notices, billing, support replies (contract; legitimate interest).
• Improve the product — aggregated, de-identified usage understanding (legitimate interest).
• Comply with law — tax, accounting, telecommunications records, and lawful requests (legal obligation).

We do not sell personal data, and we do not use your communications content for advertising.

We share personal data only with the service providers needed to run WoneAssistant:

• Cloudflare — content delivery, DNS, and DDoS protection for our website and service (may process IP addresses and request data).
• Stripe — payment processing (receives billing and payment details; acts as an independent controller for payment data).
• Hosting infrastructure providers — the data-center and server providers that run the service and website.
• Telecommunications carriers — the upstream carriers that provide phone numbers and carry calls and messages (they process call detail records as needed to deliver traffic).

Each provider is bound by a data-processing agreement and may process data only on our instructions. We may also disclose data where required by law, to enforce our terms, or in connection with a merger or acquisition (with notice where required). We do not otherwise share personal data with third parties.

Our providers may process data in countries other than yours, including the United States. Where personal data from the EEA/UK is transferred internationally, we rely on an adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses (and the UK addendum).

• Account data: kept while your account is active. After you delete your account or a plan ends, we make data available for export for at least 30 days, then delete it from production systems.
• Communications content (recordings, transcripts, messages): kept according to the retention settings of the account, then deleted.
• Call detail records and billing/tax records: kept for the period required by law (typically up to 7 years).
• Backups: deleted data may persist in encrypted backups for a limited rotation period (no more than 90 days) before being overwritten.
• Server and security logs: retained for a limited period (typically up to 12 months) for security and troubleshooting.

We protect personal data with measures appropriate to the risk, including encryption in transit (TLS) and at rest, hashed credentials, role-based access controls inside the product, least-privilege access to production systems, and security monitoring. No method of transmission or storage is 100% secure; if a breach affects your personal data, we will notify you and the authorities as required by law.

Under the GDPR and similar laws, you have the right to access, correct, export (portability), and erase your personal data, to restrict or object to processing, and to withdraw consent where processing is based on consent. You can export or delete your data from within the product where those controls are available, and you can always email [email protected] to exercise any right. If your data sits in an organization’s account, contact that organization first. We respond within one month. You also have the right to complain to your local data-protection authority.

This marketing website does not use tracking or analytics cookies. The WoneAssistant application uses only the strictly necessary cookies (or equivalent storage) required to keep you signed in and operate the service.

WoneAssistant is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this policy from time to time. We will post the revised version here with a new “last updated” date and, for material changes, give reasonable advance notice. Continued use after the effective date constitutes acceptance.

Privacy questions, requests, or complaints: [email protected]. See also our Terms of Service.