Privacy Policy

1. Our role

For website visitors and sign-up forms, Answerly is the data controller.

For the customer data of businesses that use Answerly (for example, a clinic's customers' WhatsApp messages), the business is the data controller and Answerly is a data processor acting on its behalf and instructions, as set out in Indonesia's Law No. 27 of 2022 on Personal Data Protection.

2. Data we process

• From the sign-up form: name, business name, business type, WhatsApp number, city, estimated chat volume, source page, and campaign parameters (UTM). If you fill in the optional setup details, we also store the business information you enter, such as your address, opening hours, services, staff, tables, deposit rules, deposit bank account, and whether you want to connect your Google account. IP addresses are stored only as a hash to prevent spam.
• From subscribing business owners: the owner's contact details, business information (services, prices, schedules, payment rules), and billing history. Payments are processed by Midtrans; Answerly does not store card numbers.
• On behalf of businesses: their customers' WhatsApp messages, WhatsApp numbers and profile names, photos sent by customers, and booking data.

3. Why we process it

We don't sell personal data, and we don't use businesses' customer data for advertising.

• To run the service: replying to chats, checking schedules, recording bookings, and passing chats to the business's team.
• To contact prospective clients who sign up on the website.
• To bill subscriptions and prevent abuse.
• To keep the service secure and improve it.

4. Service providers (subprocessors)

To run the service, data is processed by the following providers according to their function. Some providers may process data outside Indonesia.

• Meta Platforms (WhatsApp Business Platform): sending and receiving WhatsApp messages.
• Google (Gemini API): understanding messages and drafting replies; Google Calendar, Google Sheets, and Google Drive when a business connects its Google account.
• Telegram: sending alerts to business owners and teams.
• Midtrans: processing subscription payments.
• The server, database, storage, and email providers we use to run the service.

5. Data from your Google account

When you press "Connect Google", you give Answerly limited permission through Google's consent screen: to create and manage the bookings calendar Answerly creates, to see busy times (not event details) on calendars you can access, and to create and open only the Google Drive files Answerly created or that you pick yourself.

This data is used only for the features you ask for: recording bookings in your calendar and Google Sheet, preventing double bookings, and reading the documents you pick so the AI can answer customers. Google data is not used for advertising, not sold, and not used to train general AI models.

Answerly's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google access tokens are stored encrypted. You can disconnect at any time in your Answerly dashboard or at myaccount.google.com/permissions; once disconnected, Answerly stops accessing your Google account and deletes its tokens. Calendars and files already created remain yours.

6. Retention

• The AI only reads the recent conversation history it needs to reply.
• Message contents are kept for up to 90 days, then deleted automatically. Statistics (number of chats, replies, bookings) are kept without message contents.
• Photos sent by customers are kept for up to 30 days, then deleted automatically.
• Billing records are kept for as long as tax regulations require.
• Sign-up data is kept until you ask us to delete it.

7. Security

• All connections use HTTPS.
• Each business's data is separated at the database level.
• Access tokens and keys are stored encrypted, and internal access is restricted.
• We never ask for your WhatsApp, Facebook, or Google password.

8. Your rights

You can ask to access, correct, or delete your personal data, or withdraw consent, by contacting us.

If you're a customer of a business that uses Answerly, send your request to that business. We help the business fulfil it.

9. Cookies

This website doesn't use third-party tracking or advertising cookies.

10. Changes

We may update this policy. Significant changes will be announced on this page and, for clients, via Telegram or email.