Legal
Security
Operator: Codegrin Technologies · Product: WhatsApp AI Assistant · Last updated: August 25, 2026
How your WhatsApp account is connected
You link your existing WhatsApp number by scanning a QR code. That session is used only to run the workflows you configure or explicitly request it is not used to read or act on chats outside the scope you've selected.
What an AI client can see
When you drive WhatsApp AI Assistant from Claude, Cursor, or ChatGPT, that client only receives the specific data your request calls for a chat list, a set of messages, a scheduling result through a scoped set of tools, not open-ended access to your account.
You approve every send
Generated messages and scheduled batches are previewed before dispatch. Nothing reaches a recipient without an explicit approval step in the workflow.
Account and API access
Access to your account is protected by an API key. Keys can be rotated or revoked at any time from your account settings.
Disconnecting and deleting data
You can unlink your WhatsApp session at any time. To close your account and remove associated data, see the Data Deletion Policy.
Organizational security controls
We maintain security controls appropriate to the nature of the Service, designed to protect information against unauthorized access, disclosure, alteration, destruction, and misuse including encryption in transit, access controls, authentication controls, secret/API-key protection, logging and monitoring, infrastructure isolation, least-privilege access, security updates, and incident-response procedures. No online service can guarantee absolute security.
Reporting a vulnerability
Security issues can be reported privately to: ⚠️ [TODO security contact email]
Researchers must not access other users' information; destroy information; disrupt production systems; conduct social engineering; or publicly disclose an unresolved vulnerability before giving us a reasonable opportunity to investigate.
This page is drafted content, not final legal advice have counsel review before it goes live for real signups, and replace every ⚠️ flagged item above with a confirmed value.