Machine talks to your customers on your behalf. That makes privacy structural, not decorative. This policy explains what we collect, how Machine learns, and what stays yours — plainly.
For operator data — your account, your business content, your billing — WakaiCorp, Inc. is the data controller.
For end-customer conversations — what your customers say to Machine on your website, email, forms, and text — you are the controller and we are your processor. Machine acts on your behalf; those conversations belong to your relationship with your customer.
Operator data. Your name, email, business name, website URL, and any business documentation you provide to configure Machine. Billing runs through Stripe; we never see or store full card numbers.
End-customer conversations. The content of conversations Machine handles, the channel they arrived on, and basic metadata (timestamps, page context on your site). A random visitor identifier is stored in the end customer's browser so a conversation can continue across visits — it contains no personal information.
Usage data. Standard service logs — requests, errors, response times, device and browser basics — used to keep Machine fast and reliable.
What we don't collect. We don't buy data about you or your customers, we don't run advertising trackers, and we don't sell data to anyone. Ever.
To operate Machine on your channels; to build your customer timeline with intent and sentiment signals; to deliver the human services included in your plan (onboarding, your brand brief, periodic optimization); to bill you; to communicate with you about the service; and to keep the service secure.
On the Machine plan: your customer timeline and conversation history are yours — visible in your account, exportable, deletable. We may use de-identified, aggregated conversation data — stripped of names, contact details, and anything identifying — to improve Machine across all deployments. Conversation data is retained while your account is active and deleted within 30 days of account closure, except where law requires longer.
On Machine Closes: zero retention. Your conversations are processed to deliver the service and hand off to your team, and are not stored by us afterward, not used for learning, and not aggregated. Your conversations, your data — fully and exclusively.
Only the subprocessors required to run the service, each under data-processing agreements: Stripe (payments), Twilio (text messaging), our cloud hosting providers, and the large-language-model providers that power Machine's reasoning. Model providers process conversation content to generate responses; we configure these services so your data is not used to train their models.
We may disclose data when legally required — a valid subpoena or court order — and will notify you unless prohibited.
If WakaiCorp is acquired or merged, data transfers with the business; this policy continues to apply, and you'll be notified of any material change.
End customers who want their conversation data accessed or deleted should contact the operator — the business they were talking to. As your processor, we support you in fulfilling those requests promptly: your account includes tools to search, export, and delete individual conversations.
Data is encrypted in transit (TLS) and at rest. Access is restricted to personnel who need it to operate the service, and access is logged. We use industry-standard infrastructure providers. No system is perfectly secure; if a breach affects your data, we will notify you without undue delay and tell you plainly what happened.
You can access, correct, export, or delete your operator data at any time — from your account or by emailing us. Depending on where you live (including California and the EU/UK), you may have additional statutory rights; we honor access, deletion, portability, and objection requests regardless of geography. We do not discriminate against anyone for exercising privacy rights.
The site and widget use minimal local storage: the visitor identifier described above, and — if you use the site's terminal — your command history and display theme, which live only in your browser and are never transmitted. No advertising cookies, no cross-site tracking.
The service is for businesses and is not directed to children under 16. We do not knowingly collect data from children; if you believe a child's data has reached us, contact us and we will delete it.
We may update this policy as the service evolves. Material changes will be communicated by email at least 14 days before taking effect.
We're a small team and we read our email.
WakaiCorp, Inc. · San Francisco, CA