Privacy Policy

Last updated: May 2026

1. Who we are

TokoChat is an AI sales agent platform operated by Aguamazza Pte. Ltd. ("we", "us", "our"). We are committed to protecting your personal information and your right to privacy. Contact us at hello@tokochat.co with any questions.

2. Information we collect

  • Account information: email address, business name, and password when you register.
  • Business data: product catalogue, system prompt, and WhatsApp configuration you provide.
  • Conversation data: messages exchanged between your customers and the AI agent via WhatsApp.
  • Billing data: payment information is processed by Stripe. We store only your Stripe customer ID, not card details.
  • Usage data: log data, IP addresses, and analytics to improve the Service.

3. How we use your information

  • To provide, operate, and improve the TokoChat Service.
  • To generate AI responses to your customers' WhatsApp messages.
  • To process payments and manage your subscription.
  • To send transactional emails (e.g. billing receipts, service updates).
  • To comply with legal obligations.

4. Customer conversation data

When your customers message your WhatsApp Business number, those messages are processed by our AI (powered by Anthropic's Claude) to generate replies. Conversation history is stored in our database to provide context for ongoing conversations. We do not use your customers' data to train AI models or share it with third parties for marketing.

5. Data sharing

We do not sell your data. We share data only with:

  • Anthropic — to generate AI responses (subject to Anthropic's privacy policy).
  • Stripe — to process payments.
  • Supabase — our database and authentication provider.
  • Vercel — our hosting provider.
  • Meta (WhatsApp) — messages are delivered via the WhatsApp Business API.

6. Data retention

We retain your account data and conversation history for as long as your account is active. If you cancel your account, data is retained for 30 days before permanent deletion. You may request earlier deletion by contacting us.

7. Security

We use industry-standard security measures including encrypted connections (HTTPS), encrypted storage, and access controls. However, no system is completely secure. Please use a strong, unique password for your account.

8. Your rights

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at hello@tokochat.co. We will respond within 30 days.

9. Cookies

We use essential cookies only — for authentication sessions. We do not use advertising or tracking cookies.

10. Changes

We may update this policy from time to time. We will notify you by email of material changes. Continued use of the Service after changes constitutes acceptance.

11. Contact

Privacy questions or requests: hello@tokochat.co