Privacy policy

Wagent lets the AI agents you choose work in your WhatsApp, only in the chats you allow and only in the ways you allow. Wagent is run by Wagent, LLC, a Delaware limited liability company, at 131 Continental Dr, Suite 305, Newark, DE 19713, USA.

In this policy, “we” means Wagent, and “you” means you and the members of your workspace. It covers the app at app.wagent.sh, the agent connection at mcp.wagent.sh and this website.

For your account, billing and this website, we decide how your data is used, so we are the controller of that data.

For the chats you connect, you decide what is connected and which agents may use it. We process that content on your instructions, so you are its controller and we are your processor.

• Your account. Your email address, and your name if you give it. You sign in with a link we email you, or with Google when that option is shown.
• Your workspace. Its name, region and settings, and its members with their names, email addresses and roles.
• Your WhatsApp numbers. For each number you connect: the number, how it is connected, its state, its risk score and its history coverage. For the chats it syncs: messages (the text or caption), media details (type, size, length and file name), contacts, groups and labels.
• Media files. If media download is on for a number, we also store the files it covers. By default those are images, documents and audio. Video is off.
• Your agents. Their names, the access you gave them, your rules and guardrails, drafts, approvals and a record of every tool call and event.
• Knowledge. If you use Knowledge, the files and links you add, such as price lists and policies, with their earlier versions.
• Billing. Our payment provider takes your payments and holds your card details; we never see them. We keep your subscription status and your invoices (number, date, amount and status).
• Basic logs. Our servers keep technical logs and error reports so we can run Wagent and keep it secure.

We use your data only to run Wagent for you:

• to sync the chats you connect, so your Inbox and your agents work;
• to check every agent action against your rules, and to send what your rules or your approvals allow;
• to show your number’s health and history coverage, and to pause sending when its risk jumps;
• to bill your workspace;
• to tell you about your account: sign-in links, approvals waiting, alerts when a number disconnects, new agent access requests, spend-cap warnings and the confirmation when you cancel. These reach you in the app, by email, and in your own Message yourself chat on WhatsApp.

Where the law asks for a reason, ours are:

• to perform our contract with you: running Wagent, billing and account messages;
• our legitimate interest in keeping Wagent secure and working;
• a legal duty, such as keeping invoices and tax records.

For the chats you connect, you decide the legal basis as their controller.

Your customers and other contacts never sign up to Wagent, but their messages are in the chats you connect. Their names, numbers and messages are processed on your behalf, only for the chats you opened.

You are responsible for telling them, and for having a lawful reason to use their messages this way. Wagent has an AI disclosure setting, which adds a short note to replies an agent sends. Connecting a chat does not by itself settle what you owe the other person.

If you are a contact of a Wagent customer and want to use your rights, please ask that business first, as it decides how your messages are used. If you write to us, we will pass your request on to them.

Agents see only the chats and the rights your rules allow. A new agent starts with none. A chat set to Hidden is invisible to every agent. Family groups, banks and senders of verification codes are hidden automatically, and that set is re-checked every day.

Before an agent sees any message text, we remove one-time codes, card numbers, bank account numbers and passwords. Our log records how many were removed, never the values.

Message text reaches agents as data, marked with where it came from. Nothing written in a message can change a rule, an agent’s access or a guardrail. Agents hold only a Wagent token; they never hold your WhatsApp connection.

Agents you connect are run by others, such as Anthropic, OpenAI, n8n, Make or Zapier, or by you. What reaches them is then handled under their terms, not this policy. Choose them with that in mind, and give each the least access it needs.

An agent can ask for access using your email address. We then create a pending workspace and email you a link to review the request. The agent gets nothing until you approve it. If you don’t approve within 7 days, the request expires and the pending workspace is deleted.

Some features use AI models through an AI routing service, for example turning a voice note into text when your rules let an agent ask for it. These requests use Wagent’s key, or your own key if you add one on Billing and data.

Every AI request we send tells that service to use only model providers that do not collect your data. We never use your data to train AI models.

Your workspace stays in the region it was created in, shown on Billing and data. Today every workspace is in the European Union, which is where our database, stored files and servers are. When we offer other regions, you will see them there.

AI requests run in your region only when Billing and data shows “AI runs in the same region” as on. Otherwise they are routed globally, with the same rule that providers may not collect your data.

Wagent, LLC is a US company, and some services below and the people who run Wagent may handle data outside your region. When data leaves your region, we rely on the European Commission’s Standard Contractual Clauses or another safeguard the law allows.

• Message text: 90 days by default. You can choose 30 days, 7 days or not to store it at all. A daily job deletes older text.
• Activity log: 90 days. It is an activity log, not a compliance archive.
• Exports: deleted 7 days after they are made.
• Invoices: kept as long as tax and accounting law requires.
• When your plan ends: everything else in your workspace is deleted 30 days later.
• When you ask us to delete: everything else in your workspace is deleted 7 days after you ask. You can undo it during those 7 days.

We use these kinds of service to run Wagent. Each one handles only what it needs for its job.

WhatsApp itself is run by Meta under its own terms and privacy policy. If you connect a number through Meta’s official route, where it is offered, your messages also pass through Meta’s platform.

We do not sell your data. We share it only with these services, or when the law requires it.

Wagent staff can see your workspace in the app only while you allow it: you give support access on Billing and data for 1 hour, 24 hours, 3 days or 7 days, and you can take it back at any time. Staff access is read-only, and every staff request is logged in your Activity.

To be plain about the limit: the people who run our database can always read it directly. The grant controls access through the product.

• Export everything as JSON and CSV, any time.
• Choose how long message text is kept, or not to store it.
• Hide any chat from every agent, and change or revoke an agent’s access.
• Pause every agent at once, from any screen or by sending “STOP AGENTS” to yourself on WhatsApp.
• Cancel your plan in three clicks, with no call.
• Delete your workspace and all its data.

Depending on where you live, you can ask to see, correct, delete or move your personal data, and object to or limit how we use it. Most of this is already in the app. For anything else, write to legal@wagent.sh.

You can also complain to your local data protection authority.

• Data is encrypted in transit and at rest.
• The tokens for your WhatsApp connection are encrypted, with a separate key for each workspace.
• Agent tokens, invite links and one-time codes are stored only as hashes, never as the values.
• Every workspace’s data is kept apart: each query is limited to one workspace, and the database checks it too.
• Connections to Wagent use HTTPS.

No system is perfectly secure. If a breach affects your data, we will tell you without undue delay.

Wagent is not for children, and we do not knowingly collect their account data.

wagent.sh sets no cookies, runs no analytics and loads no third-party scripts. If you use Pause motion, your browser remembers that choice on your device. It is not sent to us.

When this policy changes, the date at the top of this page changes with it. The Terms and conditions cover the rest of how you use Wagent.

Questions about this policy or your data: legal@wagent.sh. By post: Wagent, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, USA.