Privacy policy
Last updated: 1 November 2026
This policy explains what Hi2Yes collects, why, and the choices you have. It covers businesses that use Hi2Yes and the customers who chat with those businesses through Hi2Yes.
What we collect
For business users: your phone number (your login), your name if you add it, and the business details, catalogue, knowledge and settings you enter. For your customers: the messages they send to your business on WhatsApp or your website, their phone number or a random visitor id, and the name they share. Technical data such as hashed IP addresses is kept for security and rate limiting.
How we use it
To run the service: sign you in, show your inbox, let your assistant answer your customers, create orders and payment links, and report your numbers. We do not sell personal data and we do not use your customers' conversations to advertise to them.
AI processing
To reply, the relevant part of a conversation, your business information and catalogue are sent to the AI provider your business uses — Hi2Yes's provider or the one you connected with your own key. Providers process this data to generate the reply under their own terms.
Who we share it with
Only service providers needed to run Hi2Yes: Meta (WhatsApp messages), the AI provider in use, your payment gateway (payment links), SMS and email providers, and our hosting and storage. Each receives only what its task needs.
Security
Data is encrypted in transit. Credentials such as WhatsApp tokens, payment keys and AI keys are encrypted at rest and never shown again after you save them. Login codes and session tokens are stored only as hashes.
How long we keep it
We keep your data while your account is active. You can delete catalogue items, knowledge and team members at any time. To delete your account, open Account in the dashboard menu or Settings in the app and ask: we complete it within 30 days. Receipts and tax invoices for payments to Hi2Yes are kept as the law requires.
Your rights
You can ask to see, correct or delete your personal data, and businesses can ask us to delete a customer's data. Customers of a business should contact that business first; we will help the business respond.
Contact
Write to [email protected] with any privacy question or request.