Privacy Policy

1. Data we collect

• Account data: business name, the owner’s and teammates’ names and emails, and the business WhatsApp number.
• Google sign-in: if you choose “Sign in with Google”, we only receive your Google account email address and its verification status to match your Sapa account. We do not access Gmail, contacts, or any other Google data.
• Payment data: subscription status and history from our payment providers. Card numbers are handled by the payment provider and never stored by us.
• Your business’s customer data: WhatsApp conversations, names, phone numbers, bookings, orders, and notes that Sapa processes on your business’s behalf.
• Technical data: server logs, IP addresses, and device information for security and service improvement.

2. How we use data

• To provide the service: replying to customers via the AI WhatsApp concierge, managing bookings and orders, and showing your dashboard.
• To authenticate sign-in (email magic link or Google) and keep accounts secure.
• To bill subscriptions and provide support.
• To improve reliability. We do not use customer conversations to train public AI models and we do not sell personal data.

3. Our role for customer data

For your business’s customer data, your business is the data controller and Sapa acts as a processor, handling that data on your business’s instructions.

4. Third parties

We share data only as needed to run the service with: WhatsApp/Meta (message delivery), Google (sign-in and cloud infrastructure), AI model providers (drafting replies), and payment providers. They are bound by confidentiality and security obligations.

5. Storage and security

• Data is stored on cloud infrastructure with encryption in transit and role-based access controls.
• Conversations are kept for 24 months by default, bookings for 36 months, and customer profiles until your business deletes them.
• When your subscription ends, you can request an export or deletion of your business data.

6. Your rights

You can request access to, correction, export, or deletion of your personal data, or withdraw consent, by contacting hello@sapa.business. Customers of businesses using Sapa should first contact that business; we will help the business fulfil the request.

7. Changes

We may update this Privacy Policy. Material changes will be announced by email, WhatsApp, or on this site.

8. Contact

• PT Maja Jiva
• Gedung Talavera Office Park Lantai 12, Jl. TB Simatupang Kav. 22-26, Jakarta 12430
• Email: hello@sapa.business