Privacy Policy

VELCAR.AI LLC (“VELCAR AI”, “we”, “us”) operates VELCAR AI Connect, a service that lets businesses connect their WhatsApp Business account to AI agents through Meta’s WhatsApp Business Platform. This policy explains what information we process, why, and the choices you have.

Who this policy covers

It covers businesses that connect a WhatsApp Business account to VELCAR AI Connect (“Customers”) and the people who exchange WhatsApp messages with those businesses (“End Users”). For End User messages, the Customer decides how the conversation is used and we process it on the Customer’s behalf.

Information we process

• Business account details shared by Meta when a Customer connects: business name, WhatsApp Business Account ID, phone number ID and display phone number.
• Access tokens issued by Meta so we can send and receive messages for the Customer.
• Messages and their metadata (sender and recipient phone numbers, timestamps, delivery status) exchanged between the Customer and its End Users.
• If the Customer uses the WhatsApp Business app together with the platform (coexistence) and authorizes it, contacts and up to six months of chat history synced from that app.
• Message templates the Customer creates, and basic usage and security logs.

How we use it

• To send and receive WhatsApp messages for the Customer and to generate replies with AI agents.
• To manage message templates, scheduling and handoff to the Customer’s staff.
• To keep the service secure, prevent abuse and provide support.

We do not sell personal information, and we do not use message content for advertising or to train general-purpose AI models.

Service providers

We share information only with providers that help us run the service, under contract:

• Meta Platforms, which delivers WhatsApp messages.
• Vercel, which hosts the application.
• Supabase, which stores account data and conversations.
• Anthropic, which provides the AI model that drafts agent replies.

We may also disclose information when the law requires it.

Retention

We keep information while the Customer’s account is connected. When a Customer disconnects or asks us to delete its data, we delete it within 30 days, except where the law requires us to keep it longer. See Data Deletion for how to ask.

Security

Data is encrypted in transit and at rest. Access tokens are stored encrypted and are never written to logs. Access to production systems is limited to staff who need it.

Your choices and rights

You can ask to access, correct or delete your information by writing to us. End Users can also contact the business they messaged, which controls that conversation. Residents of some US states, such as California, have additional rights under state law, and we honor them.

Children

VELCAR AI Connect is a business service and is not directed to children under 16.

Changes

If we change this policy we will update the effective date above and, for material changes, notify connected Customers.

Contact

VELCAR.AI LLC · hola@velcar-ai.com