Privacy Policy

1. Scope and controller

For this Policy, “WAFI” means the personal-finance assistance service and the person or entity responsible for operating it. Privacy requests can be sent to hola@wafi.chat. This Policy applies to the WAFI website and official service channels.

2. Information we may process

• Account and contact data: phone number, WhatsApp identifier (wa_id), profile name and data needed to identify the conversation.
• Financial information you choose to record: amounts, categories, income, expenses, savings, goals, budgets, generally described debts and related notes.
• Content you send: messages, receipt or proof-of-purchase images, and voice notes when those features are enabled.
• Technical and operational data: message identifiers, timestamps, delivery status, interaction events, security and diagnostic logs.
• Consent records: accepted Terms and Privacy versions, date/time, channel, wa_id and the related acceptance event or message identifier.
• Website data: basic technical data needed for security and operation and, if enabled, privacy-conscious usage metrics.

3. Information you must not send

Do not send full payment-card numbers, full financial-account numbers, passwords, PINs, CVV/CVC codes, authentication codes, full government ID numbers, login credentials or other highly sensitive identifiers. WAFI does not need them to organize your finances.

If such information is sent accidentally, WAFI may apply reasonable detection, masking, rejection or deletion controls and may ask the user to resend the message without the sensitive data. No technical control can guarantee detection in every case.

4. Why we use information

• Record, categorize and summarize financial movements the user chooses to provide.
• Answer questions and generate summaries, reminders, alerts or financial-education content.
• Confirm ambiguous information before saving or changing a record.
• Manage consent, preferences, opt-outs and legal-version changes.
• Operate, maintain, secure, audit and improve WAFI.
• Prevent abuse, fraud, technical errors, unauthorized access and unlawful or policy-violating use.
• Meet legal obligations and respond to valid requests from competent authorities.

5. Consent and first use

Before processing financial information on first use, WAFI must show visible links to the Terms and this Policy inside the official chat and provide a clear “Accept and continue” action using official WhatsApp/Meta interactive components where available for the implemented flow. If the user does not accept, WAFI must not add received financial information to that user’s profile.

Acceptance evidence may include the accepted versions, date/time, channel, wa_id and the technical event or message identifier. Material legal changes may require renewed consent before certain features continue.

6. WhatsApp and Meta

WAFI uses only authorized official integrations for WhatsApp Business Platform. WhatsApp use is also subject to the terms, policies and privacy practices of WhatsApp and Meta for their own services. Certain messaging and technical data is processed by WhatsApp/Meta to provide the platform.

WAFI does not use unofficial WhatsApp Web automation, session scraping, emulators or mechanisms intended to evade Meta controls.

7. Service providers and processors

WAFI may rely on infrastructure, storage, security, analytics, artificial-intelligence, voice, image and messaging providers. They should receive only the information needed for their assigned function, subject to reasonable contractual and technical safeguards. Meta/WhatsApp may be among those providers for WhatsApp Business Platform.

8. Artificial intelligence and automated processing

WAFI may use automated or AI systems to interpret messages, extract information from receipts or voice notes, suggest categories, generate explanations and produce summaries. These systems can be wrong. Users should review important information, and WAFI may request confirmation before saving ambiguous movements.

WAFI must not present an automated inference as a mandatory financial decision or as a substitute for the user’s judgment or qualified professional advice.

9. Retention

WAFI will retain data for as long as reasonably necessary to provide the service, maintain the history requested by the user, meet legal obligations, resolve disputes, prevent fraud and preserve consent records. When data is no longer needed, it will be deleted, anonymized or isolated according to applicable technical and legal criteria.

WhatsApp/Meta and other providers may have their own retention periods. WAFI must not treat WhatsApp as its backup system; information WAFI needs to retain should be stored in infrastructure controlled or contracted by WAFI.

10. Security

WAFI applies or intends to apply risk-appropriate controls such as access management, secret separation, encrypted channels, audit logging, backups, data minimization and provider review. No internet-connected service can guarantee absolute security. Users must also protect their devices, WhatsApp accounts and credentials.

11. International transfers

Technology providers may process information outside El Salvador. Where required, WAFI will seek to use appropriate contractual mechanisms and reasonable safeguards under applicable law.

12. Your choices and requests

You may request access, correction, updating or deletion of information under WAFI’s control, withdraw revocable consent, or ask to stop receiving communications by contacting hola@wafi.chat. WAFI may request reasonable information to verify identity before fulfilling a request.

WhatsApp opt-out requests will be honored. Minimum records may be kept where needed to document the opt-out, comply with law, prevent fraud or defend legal rights.

13. Minors

The WAFI beta is intended for people 18 or older. If we learn that a minor’s information was provided without a valid basis, we may restrict service and delete that information where appropriate.

14. Communications

WAFI should initiate WhatsApp communications only where the required authorization exists and in accordance with applicable WhatsApp Business Platform policies. Where required, Meta-approved message templates will be used. Users may opt out of non-essential communications.

15. Changes to this Policy

We may update this Policy because of legal, technical, operational or product changes. The current version and effective date will appear here. Material changes affecting data processing or essential service conditions may require renewed consent.

16. Contact

Privacy questions and requests: hola@wafi.chat.