1. Introduction

Weyoto Labs Ventures (“Weyoto Assist,” “we,” “us,” or “our”) operates the website and AI assistant platform at assist.weyoto.com (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using Weyoto Assist, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Information You Provide Directly

Account Information: When you create an account, we collect your email address for passwordless authentication. We do not store passwords.
Business Information: When you set up your assistant, you may provide your business name, description, handle, and other details about your business.
Documents: You may upload documents (PDF, DOCX, TXT, or plain text) containing business knowledge, policies, product details, and other content. These are processed and indexed to power your AI assistant.
Customer Inquiries: When your customers submit questions through your public assistant link, we collect the question text and, when a question cannot be answered, the customer's email address for lead follow-up.
Support Communications: If you contact us for support, we collect the content of your messages and any additional information you choose to provide.

2.2 Information Collected Automatically

Usage Data: We collect information about how you interact with the Service, including pages visited, features used, inquiry volume, and time spent on the platform.
Device Information: We may collect information about the device you use to access the Service, including browser type, operating system, and IP address.
Analytics: We use PostHog, a third-party product analytics tool, to understand how users interact with the Service. You can review PostHog's privacy practices at posthog.com/privacy.

3. How We Use Your Information

We use the information we collect for the following purposes:

To Provide the Service: Processing your documents, generating AI responses to customer inquiries, managing your account, and delivering the core functionality of Weyoto Assist.
To Communicate With You: Sending you authentication emails (via Resend), service announcements, account updates, and responses to your support inquiries.
To Improve the Service: Analyzing usage patterns to improve our AI, identify bugs, and develop new features.
To Process Payments: If you subscribe to a paid plan, we use Paystack to process your payment. We do not store your full payment card details.
To Ensure Security: Monitoring for and preventing fraudulent, unauthorized, or illegal activity.
To Comply With Legal Obligations: Responding to lawful requests from public authorities and enforcing our Terms of Service.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

Service Providers: We share information with trusted third-party service providers who help us operate the Service:
- OpenAI: Your uploaded document content and customer inquiries are processed through OpenAI's API to generate AI responses. OpenAI's data usage policy states that data submitted via API is not used to train their models.
- Resend: Your email address is used by Resend to deliver authentication and notification emails.
- Paystack: Payment information is processed securely by Paystack for subscription billing.
- PostHog: Usage data, email address, and plan information are shared with PostHog for product analytics.
Legal Compliance: We may disclose information if required to do so by law or in response to valid legal requests by public authorities (e.g., a court order or subpoena).
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
With Your Consent: We may share your information for any other purpose with your explicit consent.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide you with the Service. You may request deletion of your account and associated data at any time:

Account Deletion: You can delete your account from your dashboard settings. Upon deletion, we will permanently remove your account information, business details, uploaded documents, and inquiry history.
Archived Data: Some information may be retained in backup systems for up to 30 days after deletion before being permanently erased.
Legal Retention: We may retain certain information as required by law or for legitimate business purposes, such as fraud prevention and record-keeping.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit (HTTPS/TLS) and at rest.
Token-based authentication (JWT) with automatic expiry.
Authenticated API access with endpoint-level safeguards.
Regular security reviews of our infrastructure.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: You can request a copy of the personal data we hold about you.
Rectification: You can request that we correct any inaccurate or incomplete data.
Erasure: You can request that we delete your personal data (see Section 5).
Portability: You can request a copy of your data in a structured, machine-readable format.
Objection: You can object to our processing of your personal data for specific purposes.

To exercise any of these rights, please contact us at hello@weyoto.com. We will respond to your request within 30 days.

8. Cookies and Tracking

We store your authenticated session token in your browser's local storage. We do not use advertising cookies or third-party tracking cookies for marketing purposes. PostHog may set a cookie for analytics purposes.

9. Children's Privacy

Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately, and we will take steps to delete such information.

10. International Data Transfers

Weyoto Assist is operated from Nigeria. If you access the Service from outside Nigeria, your information may be transferred to, stored, and processed in Nigeria or other countries where our service providers operate. By using the Service, you consent to such transfers.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. We encourage you to review this policy periodically. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: hello@weyoto.com
Website: assist.weyoto.com