Privacy

The website

No cookies, no analytics, no tracking pixels, no third-party scripts beyond the web font served by Google Fonts, which sees your IP address when the font loads. Standard web-server logs record IP address, time, path and user agent, and are kept for seven days for abuse defence.

The service

What is stored

• Message history of the linked account: text, sender, timestamps, chat and contact names, and metadata about media. Media files are downloaded only when a tool explicitly requests one.
• Device credentials from the QR link, which keep the session alive the same way WhatsApp Web does.
• Account record: an identifier, your bearer token, your store path, whether sending is enabled, and a contact address if you gave one.
• Operational logs: that a request happened, which account, which tool, how long it took. Not the content of messages or tool results.

Where it is stored

On a single server in Germany, in a per-account directory on an encrypted volume. No cloud message database, no replication to other providers.

Who can access it

You, through your token. The operator, through the machine — technically unavoidable for any hosted service, and used only for debugging a problem you reported or for the legal reasons below. Nobody else.

What we never do

• Train models on your messages, or let anyone else do it.
• Sell, rent or share your data, or run ads.
• Send message content to analytics or error-tracking services.
• Read your chats out of curiosity, or scan them for content.

Where the data goes when you use it

When you connect an MCP client, the messages a tool returns travel to that client and, in an assistant, to that assistant's model provider. That transfer is caused by your prompt and governed by the client's own privacy policy — we are not a party to it. Pick your client accordingly.

Retention

• Messages: kept while the account is linked. On the Free plan the sync window is 90 days; older messages are pruned.
• After you unlink or ask for deletion: the store and the account record are removed within 30 days, backups included.
• Inactive accounts: after 12 months with no request, we warn the contact address and delete the store 30 days later.
• Logs: 7 days for web logs, 30 days for service logs.

Your rights

Under the GDPR you may request access, correction, erasure, restriction, portability, and object to processing. Mail [email protected]; identity is verified through the linked account. You can also complain to your national data protection authority.

Legal basis: performing the contract you asked for (Art. 6(1)(b)) for running the service, and legitimate interest (Art. 6(1)(f)) for abuse defence and operational logs.

The other people in your chats

A conversation has two sides, and the other side did not sign up here. Storing your own copy of your own conversations is ordinarily yours to do — the same copy your phone and WhatsApp Web hold. If you use this in a business context, that copy is a processing activity you are responsible for, and you may owe your contacts an explanation. We can sign a data processing agreement; ask.

Disclosure

We disclose data only when legally compelled by a competent authority, and will tell you unless we are forbidden to. We have never received such a request.

Changes

Material changes are announced to the contact address on the account at least 14 days before they take effect. The date at the top marks the current version.