Privacy Policy

1. Who We Are

AdVersAI is a pre-incorporation product operated under the AdVersAI trademark. Until a formal company is incorporated, references to AdVersAI, we, us, and our mean the current operator of the AdVersAI service. After incorporation, the operating entity may replace the current operator and continue this policy.

You can contact us at support@adversai.app for privacy, data, and support requests, and billing@adversai.app for billing questions.

2. Scope

This policy applies to the AdVersAI web application, APIs, dashboards, inbox, campaign tools, assistant, onboarding, analytics, notifications, connected integrations, and related services.

The service may be used by businesses, sole operators, teams, and invited users. Customers are responsible for their own privacy notices, lawful basis, messaging consent, marketing compliance, and use of the service with their contacts and leads.

3. What we do with your data

For contact, lead, campaign, and conversation data controlled by a customer workspace, AdVersAI generally acts as a processor, service provider, or vendor that processes data on the customer's instructions to provide the service.

For account administration, security, billing, product operations, anti-abuse, service analytics, and legal compliance, AdVersAI may act as an independent controller or business.

4. Data We Collect and Store

• Account and workspace data, including name, email address, role, authentication records, onboarding state, team settings, business profile, business hours, plan, credit balance, and product settings.
• Connected account data, including WhatsApp Business Account IDs, phone number IDs, Gmail account metadata, product-store source metadata, OAuth tokens, access tokens, refresh tokens, and credentials needed to operate integrations. Credentials and tokens are encrypted at rest where AdVersAI stores them as credentials.
• Contacts, leads, imported lists, segments, opt-out status, suppressions, assignments, deal outcomes, lead scores, notes, and related sales workflow records.
• Campaign, template, product, and delivery data, including WhatsApp templates, email templates, products, catalog details, campaign audiences, delivery attempts, provider message IDs, errors, retries, provider payloads, and performance analytics.
• Conversation and inbox data, including WhatsApp messages, email replies, message bodies, message metadata, Gmail thread IDs, WhatsApp webhook payloads, email headers, human replies, AI replies, and conversation history.
• AI and automation data, including onboarding chat, AI prompts and visible outputs, AI reply drafts, memory items, evidence quotes, decision logs, lead classifications, summaries, routing decisions, model usage, token usage, cost records, and safety or handoff metadata.
• Business knowledge you provide, including uploaded documents, imported website content, product details and images, business policies, and answers you give to knowledge gaps.
• Media and attachments your contacts send over WhatsApp or email, such as images, documents, and WhatsApp voice notes, with related media metadata. Where media understanding is enabled, images may be described by AI models and WhatsApp voice notes may be transcribed to text so the assistant and your team can read them; the resulting descriptions and transcripts are stored with the conversation. Voice notes and their transcripts may be treated as sensitive or biometric data in some jurisdictions; customers are responsible for ensuring they have a lawful basis to process them.
• Billing, payment, usage, audit, support, security, notification, and observability data, including payment provider IDs, subscription status, credit ledger entries, audit events, IP address, user agent, notification state, error metadata, and system email logs.

5. How We Use Data

• Create and secure accounts, workspaces, sessions, roles, team access, and connected integrations.
• Send, receive, sync, classify, route, suppress, and analyze WhatsApp, email, and related business communications.
• Import, deduplicate, segment, score, assign, and manage contacts and leads.
• Generate and improve workspace-specific AI setup, AI replies, reply drafts, template recommendations, summaries, lead scoring, handoff decisions, memory, and automation.
• Operate campaigns, delivery queues, retries, provider-error handling, analytics, billing, credits, notifications, support, security, fraud prevention, and compliance.
• Create de-identified, aggregated, or redacted service-improvement data unless a workspace opts out, subject to applicable law, platform terms, and customer authorization.

6. WhatsApp, email accounts you connect, and other connected accounts

When a customer connects WhatsApp Business Platform, AdVersAI may request permissions such as WhatsApp business management and WhatsApp business messaging through Meta Embedded Signup or related Meta flows. These permissions allow AdVersAI to access authorized WhatsApp business assets, send messages and templates, receive inbound messages and delivery events, sync template status, and maintain connection health.

When a customer connects email accounts, such as Gmail or Google Workspace, the service may request send and read-only access so it can send emails, detect replies, sync relevant threads, process bounces and auto-replies, and keep campaign and inbox workflows current.

Customers should connect only accounts that are appropriate for business messaging through AdVersAI. If a connected mailbox or account contains personal, unrelated, or sensitive information, that information may be technically accessible during sync and should be removed, filtered, or disconnected by the customer.

7. AI Processing and Training Choices

AdVersAI uses AI to help set up workspaces, understand products and audiences, draft messages, classify replies, remember relevant sales context, recommend templates, score leads, route handoffs, and send automated responses where enabled.

Workspace-specific learning uses data inside a workspace to make that workspace's AI more useful. This may include conversation history, contact memory, product information, campaign outcomes, business profile data, and customer preferences.

Unless a workspace opts out, AdVersAI may use de-identified, aggregated, or redacted data to improve shared classifiers, prompts, routing policies, playbooks, evaluations, analytics, and safety systems. This service-improvement data may include message and conversation transcripts, labelled by whether each message was sent by the AI or by a human team member, used to evaluate and improve AI quality, accuracy, safety, and routing. A workspace may opt out of this shared, de-identified service improvement by emailing support@adversai.app. We do not sell customer contact lists, WhatsApp message data, email message data, voice notes, or raw conversation data to data brokers.

Where data comes from Meta, WhatsApp, email accounts you connect, or another third-party platform, the service uses that data only as permitted by applicable platform terms, applicable law, customer authorization, customer settings, and the customer's own privacy disclosures.

To provide AI features, AdVersAI may send prompts, message snippets, business profile data, product data, contact memory, campaign context, and related metadata to AI model or routing providers. The provider and model may vary by feature, quality, cost, availability, latency, plan, fallback policy, and safety need.

8. AI Can Make Mistakes

AI outputs can be wrong, incomplete, delayed, biased, unsafe, repetitive, outdated, or inappropriate. AI may misunderstand messages, misclassify leads, miss opt-out signals, draft incorrect replies, generate inaccurate templates, summarize incorrectly, or fail to comply with a customer's business policy.

Customers and users are responsible for configuring AI settings, monitoring AI behavior, reviewing drafts where review mode is used, pausing automation when needed, and ensuring messages are lawful, accurate, non-deceptive, and appropriate.

9. Contact Consent and Unsubscribes

Customers are responsible for obtaining and maintaining all required consent, lawful basis, permissions, notices, and records before uploading, importing, messaging, scoring, or analyzing contacts.

AdVersAI may provide hosted email unsubscribe links, one-click app email unsubscribe links, contact-level opt-out status, suppression records, and AI detection of opt-out or do-not-contact signals. Customers must not bypass, remove, ignore, or defeat unsubscribe or opt-out mechanisms.

10. Companies we work with

Subprocessors are third-party service providers whose systems process data for AdVersAI. They may not have a human manually reading messages, but their systems may store, transmit, inspect, host, analyze, or process data as needed to provide their services.

• Meta and WhatsApp for WhatsApp Business Platform messaging, template management, webhooks, delivery status, and business asset access.
• Google for OAuth, sending, and sync on email accounts you connect, Google Workspace identity, Google Sheets imports, and Google AI services where configured.
• AI model and routing providers such as OpenAI, Google Gemini, xAI (Grok), Cerebras, Groq, OpenRouter, Fireworks AI, Wafer, or similar providers, including providers that host open-weight models such as Kimi, used for AI inference, transcription, image understanding, classification, evaluation, and routing.
• Speech-to-text providers such as Sarvam, used to transcribe voice notes that contacts send over WhatsApp where voice-note transcription is enabled.
• Email delivery infrastructure such as Amazon SES (AWS) for the managed branded-email sending pool, including delivery, bounce, complaint, and reply-routing events.
• Payment processors such as Razorpay for subscriptions, payments, checkout verification, invoices, and payment webhooks.
• Hosting, database, object storage, cache, queue, CDN, email delivery, observability, logging, error monitoring, analytics, and security providers used to operate the service.
• Customer-authorized workspace owners, admins, managers, analysts, and team members according to configured permissions.

We may also disclose data where required for legal compliance, security, fraud prevention, dispute resolution, accounting, audits, provider enforcement, or a merger, acquisition, financing, reorganization, asset sale, or incorporation of the AdVersAI operating entity.

11. Security

AdVersAI uses administrative, technical, and organizational safeguards designed to protect data. These may include encryption of stored credentials, password hashing, token signing, role-based access controls, session controls, two-factor authentication support, webhook signature verification, audit logs, content redaction in logs, provider error handling, and operational controls.

No system is perfectly secure. Customers are responsible for securing their own devices, accounts, Connected Accounts, provider dashboards, business manager accounts, API credentials, team roles, and exported files.

12. How long we keep data

Unless a different retention setting, legal obligation, security need, billing need, or support commitment applies, AdVersAI may retain raw customer data for up to 730 days by default.

Some data may be retained longer where needed for security and audit logs, billing, tax, accounting, payment records, legal claims, provider delivery evidence, unsubscribe evidence, system email logs, backups, disaster recovery, and de-identified or aggregated records.

Customers may export their workspace data and permanently delete a contact's personal data (or all of a workspace's data) through in-app controls, and may also request export, deletion, correction, restriction, integration disconnection, or opt-out from global anonymized service improvement by emailing support@adversai.app. We may need to verify the requester and may deny, delay, or narrow a request where necessary to protect security, prevent fraud, preserve legal rights, comply with law, maintain billing or audit records, or honor another person's rights.

Deletion from active systems will be handled in a commercially reasonable time, subject to legal, security, provider, billing, and backup constraints.

13. Prohibited Uses

• Spam, phishing, scams, malware, credential theft, impersonation, deceptive messages, unlawful marketing, or unsolicited bulk messaging.
• Purchased, scraped, harvested, stolen, rented, or otherwise unauthorized contact lists.
• Bypassing unsubscribe requests, opt-outs, do-not-contact requests, provider suppressions, or platform quality restrictions.
• Medical, legal, financial, insurance, lending, investment, employment, housing, education admissions, emergency, law-enforcement, or other high-risk decisions without prior written approval and appropriate human review.
• Targeting minors, collecting children's data, or communicating with children where prohibited or without required consent.
• Illegal goods, regulated goods without authorization, adult sexual services, exploitative content, hate, harassment, threats, violence, weapons trafficking, unlawful gambling, or deceptive financial schemes.
• Prompting AI to hide its identity, deceive people, fabricate facts, ignore compliance rules, reveal system prompts, expose secrets, or bypass safety controls.

14. Payments and Credits

Credits are not cash, stored value, bank deposits, or legal tender. Credits may be used only for eligible AdVersAI features. Credits are non-refundable except where required by applicable law or expressly agreed in writing by AdVersAI.

Free trials: when you start a free trial, we record the plan, its start and end dates, and any extension, so we can apply the one-trial-per-account limit and contact you when the trial ends. A trial does not ask for, and we do not collect, payment card details.

Provider charges from Meta, WhatsApp, email accounts you connect, or other connected accounts may be billed directly by those providers to the customer. AdVersAI is not responsible for charges imposed by a customer's Connected Accounts unless expressly stated in writing.

15. Third-Party Platforms

Connected Accounts and third-party platforms are governed by their own terms and privacy policies. Customers must comply with Meta Terms, WhatsApp Business Terms, WhatsApp Business Messaging Policy, WhatsApp Commerce Policy, Google policies, rules for email accounts you connect, email laws, payment provider terms, and any other platform rules that apply to their use.

AdVersAI may suspend or restrict workspaces, integrations, campaigns, or automation if needed to protect users, contacts, providers, platform standing, security, reputation, deliverability, legal compliance, or safe AI behavior.

16. Where data is stored

AdVersAI, its infrastructure providers, and subprocessors may process and store data in India, the United States, the European Economic Area, or other countries where they operate. By using the service, customers authorize transfers needed to provide the service, subject to applicable law and applicable safeguards.

17. Changes to This Policy

We may update this policy from time to time. If changes are material, we will provide notice through the service, email, or another reasonable method. Continued use after the effective date means acceptance of the updated policy, except where applicable law requires a different process.