Privacy & Data Policy

1. Who We Are

WAZU is a product of Agentic1. The service is provided by Agentic1 Labs, Inc., a Delaware corporation. Agentic1 Labs, Inc. is the contracting party and data controller for the WAZU service unless a separate written agreement says otherwise.

JigSaw Labs (Pty) Ltd. is our South African operating affiliate. It may provide local operations, engineering, administration, and customer support on behalf of Agentic1 Labs, Inc. and under its instructions.

Business address: 318 6th Street, Voelklip, Hermanus, 7100, South Africa
Privacy contact: hello@wazu.me

2. Scope of This Policy

This Policy applies when you:

• use WAZU websites, dashboards, mobile-accessible experiences, or support channels;
• send or forward messages, media, email content, or other material to WAZU;
• use a personal, team, organisation, or cohort workspace;
• connect WAZU to ChatGPT, Codex, Claude, Manus, or another authorised AI or MCP client; or
• ask an authorised client to search, retrieve, organise, summarise, or save information in WAZU.

3. Information We Process

3.1 Account and Connection Information

• Your name, email address, WhatsApp number, and account preferences where provided
• Authentication, authorisation, agent-connection, workspace, and role information
• The organisations or cohorts you are permitted to access and your selected working context

3.2 Content You Choose to Store or Send

WAZU processes content you intentionally provide, forward, upload, or authorise an integrated client to save. We do not independently read or monitor your private WhatsApp chats.

• Message text, captions, notes, and links
• Images, documents, audio, video, contact cards, and other attachments
• Metadata included with submitted content
• Content saved into personal or permitted shared workspaces

3.3 AI and MCP Connector Information

When you connect WAZU to an authorised AI or MCP client, we may process:

• the search, retrieval, navigation, or ingestion request you make;
• the minimum account, agent, workspace, and cohort context needed to authorise the request;
• matching evidence, item content, attachments, summaries, and relationship data returned in response;
• content and destination information you instruct the client to save to WAZU; and
• tool results, write receipts, timestamps, and security or diagnostic events.

WAZU limits connector responses to the context and permissions associated with the authenticated connection. We do not intentionally return authentication secrets or unrelated personal information in tool responses.

3.4 Derived and Technical Information

• OCR text, transcriptions, tags, labels, embeddings, summaries, and search indexes
• Browser, device, IP address, request, performance, error, and security-log information
• Website analytics and cookie information where consent is required and obtained

4. How We Use Information

• Provide search, retrieval, digests, tagging, OCR, summaries, Hive Map, media, and workspace features
• Authenticate users and enforce personal, cohort, organisation, and agent permissions
• Execute user-requested connector tools and record reliable usage or write receipts
• Operate, secure, troubleshoot, and improve WAZU
• Send service messages, digests, and support responses
• Comply with legal obligations and enforce our Terms

We do not sell your personal information or stored content.

5. Legal Bases for Processing

• Contract: to provide WAZU and perform actions you request
• Consent: where you submit content, connect an optional client, or accept non-essential analytics
• Legitimate interests: security, fraud prevention, service reliability, and product improvement
• Legal obligation: where processing is required by applicable law

6. AI Clients and Third-Party Platforms

When you ask ChatGPT or another authorised client to use WAZU, the information needed to answer your request is transmitted to that client or its platform. That third party may process the information under its own terms and privacy policy. You should only connect platforms you trust and should disconnect a client when you no longer want it to access WAZU.

WAZU does not give an AI client unrestricted database access. Requests pass through WAZU authentication, authorisation, scope, and tool controls.

7. Where Information Is Stored and Processed

WAZU currently uses infrastructure and service providers that may include:

• Microsoft Azure, Europe: application, database, storage, search, and AI-processing services
• Infrastructure in South Africa: limited operational and temporary media-processing services
• Amazon Web Services, including AWS SES: website hosting and email delivery
• User-selected AI platforms: processing of connector requests when you invoke WAZU through that platform

We use contractual, organisational, and technical safeguards for international transfers where required by law.

8. When We Share Information

We may share information with:

• our operating affiliate, JigSaw Labs (Pty) Ltd.;
• hosting, storage, search, email, OCR, analytics, security, and support providers;
• an AI or MCP platform you choose to connect and invoke;
• professional advisers bound by confidentiality; and
• regulators, courts, or law enforcement where legally required.

Service providers may process information only for authorised WAZU purposes and subject to appropriate safeguards.

9. Retention and Deletion

• Stored content is retained according to the applicable plan, workspace configuration, or customer agreement.
• Free-tier content may use a rolling 30-day retention period where shown in the product.
• Paid or shared-workspace content may be retained until it is deleted, the account closes, or the applicable agreement ends.
• Derived OCR, tags, summaries, and indexes generally follow the retention of the source content.
• Connector, system, and security logs are generally retained for 30–90 days unless a longer period is needed for security or law.
• Email-delivery and digest records may be retained for up to 24 months.
• Backup copies may remain for up to 30 days after deletion before expiring.

Verified deletion requests are normally completed within 30 days, subject to backup expiry, security holds, and legal obligations.

10. Security

We use measures including TLS in transit, encryption at rest for core data, role-based access controls, scoped connector credentials, environment separation, monitoring, patching, and secrets management. No service can promise absolute security; please contact us promptly if you suspect unauthorised access.

11. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to processing, and to withdraw consent. You may also disconnect an AI client or revoke its WAZU connection.

Email hello@wazu.me to exercise a privacy right. We may need to verify your identity before completing the request.

12. Children

WAZU is not intended for users under 16. Contact us if you believe a child has provided information to WAZU.

13. Changes to This Policy

We may update this Policy as WAZU, our providers, or applicable law changes. We will update the date above and provide additional notice where required.

14. Contact

Agentic1 Labs, Inc.
318 6th Street, Voelklip
Hermanus, 7100, South Africa
hello@wazu.me