Privacy Policy

WiseSam (“we”, “our”, “us”) operates the WiseSam platform, an AI personal assistant service accessible via messaging applications and our web dashboard. Our contact email for privacy matters is welcome@wisesam.ai.

This Privacy Policy describes how we collect, use, store, and protect the personal data of people who use WiseSam. We process personal data as a data controller for our users, and as a data processor when handling content you ask your assistant to act upon.

Account data. When you create a WiseSam account we collect:

• Email address
• Username and display name
• Encrypted authentication credentials
• Payment information — processed and stored by Stripe. We never see, store, or have access to your full card number.

Conversation data. Because WiseSam is an AI assistant, the heart of the service is conversation. We process:

• Text messages you send to your assistant, and the assistant’s replies
• Voice notes you choose to send to your assistant, where supported (transcribed for processing; original audio retention is described in §4)
• Files, images, or links you share with the assistant for it to review or act on
• Metadata such as timestamps, message counts, and the channel used (e.g. Telegram, web)

Connected-service data. If you choose to connect third-party services (such as Google Calendar), we receive only the data scopes you explicitly grant during the OAuth flow. We do not request access to any service you have not opted into.

Usage data. We collect basic, privacy-preserving analytics about how the product is used — page views, feature interactions, and aggregate session metrics. We do not use fingerprinting or third-party advertising trackers.

We use your data to:

• Create, operate, and secure your account
• Provision and run your AI assistant — including generating responses to your messages
• Process payments and manage your subscription via Stripe
• Send transactional emails (account activation, billing receipts, security alerts, service announcements)
• Respond to support requests
• Improve product reliability and performance, on the basis of aggregated, de-identified usage data
• Comply with legal obligations and prevent abuse of the platform

What we do not do: we do not sell your data, we do not share it with advertisers, and we do not use the content of your conversations to train AI models — ours or anyone else’s.

Account data: retained for as long as your account is active, and for up to 90 days after deletion to comply with legal and accounting obligations.

Conversation history: stored so you can revisit past interactions with your assistant. You can delete individual messages or your entire history from your account settings at any time.

Voice notes: original audio is transcribed and then deleted within 24 hours. Only the transcript is retained, subject to your conversation-history settings.

Backups: encrypted backups are retained for up to 30 days for disaster recovery. Deleted data may persist in backups for this window before being permanently removed.

We use a small number of trusted sub-processors to operate WiseSam. Each is bound by data-processing terms and applicable safeguards.

• Stripe — payment processing and subscription billing
• Google Firebase — authentication, database, and platform hosting
• AgentMail — the dedicated email address used by your assistant on your behalf
• Telegram — optional messaging channel; if you use it, communications are subject to Telegram’s own terms and privacy policy
• Large-language-model providers — we route your messages to the AI provider that powers your assistant’s replies, under enterprise terms that prohibit using your data for model training

We will update this list as our infrastructure evolves. Material changes to sub-processors will be announced via the dashboard and by email where appropriate.

Our infrastructure is primarily hosted in the United States. If you access WiseSam from outside the US, your data may be transferred to and processed in the US. Where required, we rely on Standard Contractual Clauses (SCCs) and equivalent legal mechanisms to safeguard those transfers.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct or update inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent for any optional processing you opted into
• Lodge a complaint with your local data-protection authority

To exercise any of these rights, email welcome@wisesam.ai. We will respond within 30 days.

We take a layered approach to security:

• All connections to WiseSam are encrypted in transit (TLS)
• Sensitive data — OAuth tokens, credentials — is encrypted at rest
• Access to production systems is restricted, logged, and reviewed
• We do not store passwords; authentication is handled via Firebase Authentication using industry-standard hashing

No system is completely secure. If you become aware of a vulnerability or potential incident, please contact welcome@wisesam.ai.

We send three categories of email:

• Transactional — account activation, billing receipts, password resets, security alerts. You cannot opt out of these while you have an active account.
• Service — material changes to the product, privacy policy, or terms. Required for transparency; cannot be opted out of while you have an account.
• Marketing — product updates and tips. You can unsubscribe from the footer of any marketing email at any time, and we will not send you marketing email again unless you opt back in.

The WiseSam dashboard uses session cookies for authentication. Our public landing pages use a minimal, privacy-preserving analytics setup to understand aggregate traffic and feature usage. We do not use cross-site tracking cookies, fingerprinting, or advertising pixels.

WiseSam is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at welcome@wisesam.ai and we will delete it promptly.

We may update this policy from time to time. We will notify you of material changes by email or via an in-product notice. The “Last updated” date at the top of this page reflects the most recent revision. Your continued use of WiseSam after a change takes effect constitutes acceptance of the updated policy.