Privacy Policy — WhatsApp AI Agent

This Privacy Policy explains how SageCraft Automation ("we", "us", "our") collects, uses, and protects information when you interact with our WhatsApp AI Agent (the "Service"). The Service is a demonstration chatbot that shows how an automated WhatsApp assistant can answer questions and, with your consent, capture contact details for follow-up.

1. Who we are

SageCraft Automation is a sole-operator consultancy that builds workflow and AI automations. For any privacy question or request, contact us at john@sagecraftautomation.com.

2. Information we collect

We only collect what you provide through the WhatsApp conversation:

Data	When	Why
Your WhatsApp phone number	Automatically, when you message us	To route the conversation, remember it across messages, and (if you opt in) to identify your record for follow-up
The content of messages you send	While chatting	To understand your request and generate a reply
Your email address	Only if you choose to provide it	So we can contact you about our services
Your first name	Only if you choose to provide it	To personalise our follow-up

We do not collect your WhatsApp profile name, location, contacts, media, payment details, or any special-category data.

3. How we use your information

• To operate the demo and respond to your messages in real time.
• To maintain short-term conversation memory (keyed to your phone number) so the chat flows naturally.
• If you opt in by providing your email, to contact you about SageCraft Automation's services.

We do not sell, rent, or trade your information, and we do not use it for advertising.

4. Service providers we share data with

To run the Service we use a small number of trusted processors. Your data is shared with them only as needed to deliver the Service:

• Meta Platforms (WhatsApp Business Platform) — delivers messages between you and us.
• OpenAI — processes the text of your messages to generate the assistant's replies.
• Google (Google Sheets) — stores your phone number and any email and first name you provide, for follow-up.
• n8n — the automation platform that orchestrates the workflow.

These providers process data under their own privacy terms. We may also disclose information if required by law.

5. Legal basis

Where the UK/EU GDPR applies, we rely on your consent (which you give by messaging us and by choosing to share your email/name) and on our legitimate interest in demonstrating and marketing our services. You can withdraw consent at any time (see "Your rights").

6. Data retention

Conversation memory is short-lived and is discarded automatically. Contact details you provide (phone number, email, name) are kept in our lead spreadsheet until they are no longer needed for follow-up, or until you ask us to delete them — whichever is sooner.

7. Your rights

You may ask us to:

• access the information we hold about you;
• correct or update it;
• delete it ("right to be forgotten");
• stop contacting you / opt out of follow-up.

To exercise any of these, email john@sagecraftautomation.com from the address you gave us, or include your WhatsApp number. We will respond within a reasonable time.

8. Security

We use reputable providers with encryption in transit and access controls. No system is perfectly secure, but we take reasonable steps to protect your information and limit access to it.

9. Children

The Service is intended for business audiences and is not directed at children under 16. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the latest version. Continued use of the Service after changes means you accept the revised policy.

11. Contact

Questions or requests: john@sagecraftautomation.com