Wamin

Service information

Privacy Policy

How Wamin handles account data, activated group conversations, and your business records.

Last updated: 3 October 2026

Operator and scope

Wamin is operated by WA Games Interactive. Contact [email protected] about privacy. This policy covers wamin.app and Wamin features. Business operators are also responsible for customer and group-member data they submit; inform group members before activating Wamin and ensure you have a lawful basis to process their data.

Data we process

Google sign-in requests basic identity scopes (openid, email, profile): a Google account identifier, verified email, and name. We do not request Gmail, Drive, Calendar, or your Google password. Login exchange tokens verify identity; the application stores identity and a local session, rather than ongoing access to Google services. Service data includes business profiles, assistant instructions, WhatsApp group and sender identifiers, relevant message text and quotes, proposals, records, orders, payment records, Excel templates, exported documents, and subscription/transaction metadata. Group invitation links are processed for onboarding. Technical data such as IP addresses, access times, request status, and operation identifiers may be processed by the application and infrastructure providers for security and diagnostics.

Why we process data

Account data enables sign-in and access control. Business data and group messages support proposals, assistant instructions, summaries/exports, and subscriptions. Technical data supports security, abuse prevention, customer support, and recovery from failures. Private messages are not forwarded to AI or stored as business records. The gateway may temporarily queue group messages for forwarding; the backend processes content only for active, bound groups. The backend discards content from inactive groups. Proposals requiring approval must be confirmed by an authorized user.

AI, service providers, and recipients

Active group message content and necessary business context may be sent to an AI model provider to run the assistant. Do not include unnecessary sensitive information. Responses and documents sent back to a group are visible to its members; dashboard access follows business permissions. Google processes sign-in; Cloudflare supports DNS, HTTPS connections, and site protection; hosting providers store service data; payment services and payment providers process checkout. WhatsApp use is also subject to WhatsApp/Meta policies. Providers may process data outside Indonesia depending on their service locations. Contact us for provider information applicable to your account. We do not sell personal data. Disclosure to authorities requires an applicable legal basis.

Storage and retention

Periodic application cleanup clears inbox text older than seven days, AI run text more than seven days after completion, and outgoing text more than seven days after successful sending. Gateway queue text is cleared after backend acknowledgement; stalled text is cleared after seven days. Service outages can delay periodic cleanup. This does not delete all data within seven days. Business records, proposals, orders, payments, templates/documents, delivery metadata, and audit records are excluded from that text cleanup. Uncertain deliveries are retained for reconciliation. Backups and provider-held data follow separate storage cycles. Account/data deletion requires operator review, including data needed for legal obligations, transaction evidence, security, or disputes.

Cookies and account protection

Wamin uses cookies for sessions, form protection (CSRF), Google sign-in, and language preferences. These support essential service functions. Application pages do not install advertising trackers. Security providers may use technical cookies depending on their configuration. Disabling cookies may prevent sign-in or form submission. We restrict access by account and business, use HTTPS for the production service, and limit credential access. No system is risk-free. Protect your Google account, linked WhatsApp devices, and business memberships.

Your choices and requests

Contact [email protected] to request information, access/a copy, correction, a halt to processing, or deletion in accordance with applicable rights. Include your account email and request scope; we verify identity and authority over business data. Group members may contact us and the relevant group operator. See Data Deletion for the full procedure. Pausing or revoking a group stops new processing according to its status but does not automatically delete existing records. Revoking the Google connection removes the authorization granted through Google; it does not delete Wamin data or automatically end an existing local session.

Policy updates

We update this page when processing practices change and display the revision date. Material changes will be communicated through relevant service channels; additional consent will be requested where required. Read this policy with the Terms of Service and information shown when using a feature.