Privacy policy
Last updated 5 November 2026 · WapDesk, Lahore, Pakistan · WhatsApp +92 343 0136316
WapDesk is a WhatsApp receptionist service for small businesses. This policy explains what we collect, why, and what we do with it, in plain language.
Who we are
WapDesk is operated by Waleed Shahzad in Lahore, Pakistan. For anything about this policy, message us on WhatsApp at +92 343 0136316 or email support@accendia.ai.
What we collect, and why
- Business account details. Your name, business name, email, phone number and password (stored hashed). Needed to run your account.
- Your business profile. Services, prices, opening hours, FAQs, team members, product catalog. The receptionist answers only from this.
- WhatsApp connection data. Your WhatsApp Business Account id, phone number id and an access token issued by Meta. The token is encrypted at rest and used only to send and receive messages on your number.
- Customer conversations. Messages your customers send to your business number and the replies sent on your behalf, including transcriptions of voice notes. Needed to answer, book, take orders and show you the chat in your dashboard. If you connect a number that already used the WhatsApp Business app, Meta may send us up to 180 days of earlier one-to-one chats and your contact names, once, so your dashboard has context.
- Bookings and orders created in those conversations, with the customer's name and phone number.
- Usage and billing. Message counts, plan, payment references you give us, and technical logs for reliability.
How the receptionist works
Replies are generated by an AI model from your business profile and the conversation. We send the conversation text, and voice note audio for transcription, to the model provider (Google Gemini or Anthropic Claude, depending on your plan). They process it to produce the reply. On paid API access, neither provider uses this data to train its models. During free trials, replies may run on Google's free Gemini tier, where Google may use the content to improve its products. Messages are delivered through Meta's WhatsApp Business Platform, which has its own terms and privacy policy.
What we never do
- We do not sell your data or your customers' data.
- We do not message your customers for anyone other than your business, and never for marketing without your instruction and their consent.
- We do not read your chats for any purpose except running the service, fixing a problem you reported, or where the law requires it.
Who can see what
You and the people you add to your account see your conversations, bookings and orders. WapDesk staff can access an account only to provide support you asked for or to keep the service running. Our hosting providers store the data on our behalf under their security terms.
Retention
Conversations, bookings and orders stay in your account while it is active so your dashboard and reports work. When you close your account we delete your profile, token and conversation data within 30 days, except records we must keep for billing or legal reasons. You can ask us to delete specific conversations at any time.
Your choices
- Pause the receptionist at any time from Settings. Nothing is sent while it is paused.
- Disconnect your WhatsApp number from Settings. We stop receiving messages immediately and revoke the token.
- Export or delete your data by messaging us. We respond within 7 days. Steps are on our data deletion page.
- Your customers can reply STOP to any proactive message and we will not message them again.
Security
Access tokens are encrypted at rest. Connections use HTTPS. Webhooks from Meta are verified with a signature. Passwords are hashed. We limit who at WapDesk can access production systems.
Changes
If this policy changes in a way that matters to you, we will tell you in the dashboard and on WhatsApp before it takes effect.