Privacy Policy

This Privacy Policy explains how Wheeko ("Wheeko", "we", "us", or "our"), a product of CanZova Inc., collects, uses, stores, and protects information when you use our WhatsApp Business CRM platform, our website (wheeko.com), and related services (collectively, the "Service").

1. Information We Collect

A. Client Company Data

• Business name, email address, phone number, and country
• Account login credentials
• Payment and billing information
• Team/agent accounts created within your dashboard (name, email, role)

B. End-Customer Data (WhatsApp Contacts)

• Name (from WhatsApp profile) and phone number
• Message content, including text, images, documents, audio, video, and location
• Call metadata such as duration, status, and timestamps

C. Technical and Usage Data

• IP address, browser and device type, login timestamps

D. Website Visitor Data

• Cookies and analytics data collected through wheeko.com (see Section 10)

2. How We Use Your Information

• To deliver the Service, including WhatsApp messaging, calling, and AI auto-reply features
• To process customer messages and generate automated AI responses
• To enable multi-agent collaboration and conversation management
• To process billing and manage subscription plans
• For account security, login verification, and fraud prevention
• To improve the Service, analyze performance, and fix issues
• To communicate service updates, billing notices, or provide support

3. Encryption and Access Control

Message content is stored in our database encrypted-at-rest using AES-256 encryption, with a unique encryption key and initialization vector (IV) per message. The encryption key is held solely by an authorized server administrator. No developer, agent, or team member — regardless of access to application code — can decrypt data without this key and server-level access.

Within the application, authorized automated processes (including AI auto-reply and the agent support dashboard) access conversation content in order to deliver customer support, which is a core function of the Service. Wheeko does not provide any dashboard or admin feature that allows our team to "log in" to a client's account to browse their data — data is accessed only by each client's own authorized users through their dashboard.

We do not sell message content to third parties, and we do not manually browse client data outside of what is necessary to operate the Service.

4. Third-Party Data Sharing

Your data is stored and processed using secure infrastructure providers, including cloud storage, hosting, and communication APIs, all of which follow industry-standard security practices. We also use third-party AI technology (such as OpenAI) to power automated response features. We do not publicly disclose specific technical infrastructure details for security reasons, but this information may be shared with enterprise clients under a non-disclosure agreement upon request.

5. Data Retention

While your subscription is active, your data (messages, media, and call logs) is stored securely. If your subscription expires, your account enters a read-only mode and your data is preserved so that you may renew and regain access.

If your account is cancelled, your data is retained for a 30-day grace period, after which the data belonging to both the client and their end-customers is permanently deleted from our live database.

Our infrastructure provider also performs routine daily security backups, which are automatically overwritten on a rolling 7-day cycle. Copies of deleted data may remain in these backups for up to 7 additional days before being automatically purged. These backups exist solely for disaster-recovery purposes and are not used for routine access.

6. Your Rights

Client Companies

Client companies may access, correct, and delete their data — including messages, contacts, and call logs — directly through their account dashboard. Clients may also opt out of marketing communications.

End-Customers

End-customer data is managed by the client company they are messaging with. Client companies may access or delete end-customer messages, chats, and logs through their dashboard. WhatsApp marketing/template messages are governed by Meta's own template approval and opt-out policies.

For any data-related inquiry, you may contact us using the details in Section 13.

7. International Data Transfers

Our servers are located in the EU (Germany). This means your data is transferred to, and stored in, a location outside your own country. We take steps to ensure that such transfers comply with applicable data protection laws and are protected by appropriate security measures, including encryption and access controls.

8. Children's Privacy

Wheeko is a business-to-business (B2B) platform designed for use by businesses. We do not knowingly collect data from individuals under the age of 18. If we become aware that we have inadvertently collected such data, we will delete it promptly.

9. Data Breach Notification

If we become aware of a security breach involving your data that poses a risk to your rights and freedoms, we will notify affected clients by email within 72 hours, or as soon as reasonably possible. The notification will describe the nature of the breach, the type of data involved, and the steps we have taken in response.

10. Cookies and Tracking

wheeko.com may use cookies and similar tracking technologies to analyze website performance and measure marketing effectiveness (such as Google Analytics, Meta Pixel, and similar analytics or advertising tools). These cookies track your browsing behavior on our site to help us improve user experience and provide relevant advertising.

You can disable or manage cookies through your browser settings. Where applicable, we also provide a cookie consent banner so you can set your preferences on your first visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will take effect as soon as it is posted on our website, with the "last updated" date shown at the top of this page. We recommend reviewing this page periodically.

12. Meta Platform-Specific Disclosure

Wheeko uses the WhatsApp Business Platform (Meta) to provide messaging and calling services. Data collected through WhatsApp — including messages, contact information, and call metadata — is handled in accordance with Meta's WhatsApp Business Platform Terms as well as this Privacy Policy.

Wheeko is in the process of becoming certified under Meta's Tech Provider Program, an independent verification of technical, security, and data-handling standards. We comply with Meta Platform Terms regarding data collection, storage, and use.

13. Contact Us

If you have any questions about this Privacy Policy, or wish to make a request regarding your data, please contact us: