1. Who We Are
WAZU (“we”, “us”, “our”) is a service operated by:
JigSaw Labs (Pty) Ltd.
hello@wazu.me
This Privacy & Data Policy explains how we collect, use, store and protect your personal information in accordance
with POPIA (South Africa), GDPR (EU/UK), and international best practices.
2. Scope of This Policy
This Policy applies when you:
- forward WhatsApp messages or media to your WAZU number,
- visit our website or dashboards, or
- interact with us through email or support channels.
3. What Data We Collect
3.1 Content You Intentionally Forward
WAZU only processes the content you choose to forward. We do not access, read, or monitor your WhatsApp chats.
- Message text or captions
- Images, documents, audio, video, and other attachments
- Links, contact cards, and metadata included in forwarded messages
3.2 Account Information
- Your WhatsApp number (used as your unique identifier)
- Your email address (needed for digests or dashboard login)
- Your settings and preferences
3.3 Derived Information
- OCR text extracted from images or documents
- Auto-generated tags and labels
- Digest summaries generated for you
- Search indexes for your account
3.4 Analytics & Cookies (Consent Only)
Analytics runs only after your explicit consent via our cookie banner.
For details, see our Cookie & Tracking Policy.
4. How We Use Your Data
- To provide the WAZU service (digests, search, tags, OCR, dashboard)
- To operate and secure our systems
- To send email digests and user notifications
- To improve performance and user experience
- To comply with legal obligations
We do not sell your data.
5. Legal Bases for Processing
- Consent – you forward content or accept analytics
- Contract – to deliver the service you request
- Legitimate Interest – security, platform stability
- Legal Obligation – compliance with applicable law
6. Where Your Data Is Stored and Processed
WAZU currently hosts infrastructure in:
- Microsoft Azure – Europe Region (EU)
Main application servers, SQL database, LLM layer
- Local Storage (South Africa)
Temporary media storage for processing & direct asset delivery
- AWS SES (EU Region)
For sending email digests and notifications
All data transfers are secured using TLS, and GDPR-compliant Standard Contractual Clauses apply where required.
7. When We Share Your Data
We may share data with:
- Cloud hosting providers (Azure EU)
- Email delivery providers (AWS EU)
- OCR / processing services (Azure LLM EU)
- Professional advisers (legal, financial, security)
- Regulators or law enforcement when legally required
Providers are contractually required to protect your data and use it only for WAZU-related purposes.
8. Data Retention
We keep your data only as long as necessary to deliver the service or meet legal requirements.
8.1 Standard Retention Periods
- Forwarded messages & media (Free Tier):
30 days rolling retention
- Forwarded messages & media (Future Paid Tiers):
Retained indefinitely until user deletes or account is closed
- Email digest logs:
24 months
- Account information (email, number):
Stored until account deletion request
- OCR text, tags, summaries:
Same retention as the original message/media
- System logs & security logs:
30–90 days depending on system layer
- Backup snapshots:
Up to 30 days
8.2 Upon Deletion or Termination
When you request deletion:
- Your account is placed into a pending deletion state
- All personal data is deleted within ~30 days
- Backups containing fragments will expire naturally within 30 days
9. How We Protect Your Data
- Encryption in transit (TLS 1.2+)
- Encryption at rest for all core data
- Role-based access control
- Isolated production environments
- Regular patching and system monitoring
- Secure keys and secrets management
10. Your Data Rights
You may exercise the following rights at any time:
- Access – request a copy of your data
- Correction – fix inaccurate information
- Deletion – delete your account and all linked data
- Portability – request export of your data
- Restriction – limit certain forms of processing
- Withdraw consent – disable analytics/cookies
Your Data Rights
You can exercise your data rights by emailing hello@wazu.me:
- Export Your Data: We'll send you all your stored messages and account data.
- Delete Your Account: We'll permanently remove all your data.
- Correct Your Information: Update any inaccurate details.
We process all requests within 30 days as required by law.
Self-service tools coming soon!
11. Children’s Data
WAZU is not intended for users under 16. If you believe a minor is using WAZU, please contact us for removal.
12. Data Breaches
In the unlikely event of a data breach likely to impact your rights, we will notify you and any applicable regulator as required by law.
13. Changes to This Policy
We may update this Policy from time to time. The updated version will always be posted at this location with a new “Last Updated” date.
14. Contact Us
For questions about this Policy or your data:
JigSaw Labs (Pty) Ltd.
hello@wazu.me