Legal
Privacy Policy
What Whaat is
Whaat is an automatic translation service used on your own WhatsApp number, by people and by businesses. When someone messages an account that uses Whaat, their message is translated and the translation is delivered into the same conversation.
Where Whaat is used by a business, that business is the data controller and Shakeapp Inc. is a data processor acting on its instructions. If you messaged an account that uses Whaat, your relationship is with whoever holds that account; this policy explains what we do on their behalf.
What we process
- Message text, in order to translate it. It is processed in memory and not stored by us.
- Phone numbers, to deliver the reply. We do not store them. Where we need to remember that someone has already been shown the automatic-translation notice, we store a one-way cryptographic hash that cannot be reversed back into a phone number.
- WhatsApp message identifiers, for up to 24 hours, so a message WhatsApp delivers to us twice is not translated twice.
- Account configuration — the account name, WhatsApp number identifier, chosen language, plan, contact email, and an access token that is encrypted before it is stored.
- Operational records — that a translation failed, that an account reached a usage limit. These never contain message content.
We do not use anyone's messages to train models, to build profiles, or for advertising, and we do not sell personal information.
Who else is involved
Translating and delivering a message requires these providers:
| Provider | Purpose | Location |
|---|---|---|
| Meta Platforms (WhatsApp Business Platform) | Delivering messages | Global |
| Anthropic | Producing the translation | United States |
| Vercel | Running the service | United States |
| Supabase | Storing account configuration | United States |
| Hetzner Online | Running the server that links personal WhatsApp numbers | Germany |
Message content reaches Meta and Anthropic as a necessary part of translating and delivering it. Anthropic does not use API inputs to train its models.
Because Shakeapp Inc. and these providers are in the United States, personal data originating elsewhere is transferred internationally. For transfers of personal data from the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission's Standard Contractual Clauses, which form part of our data processing agreement with each business client.
How long we keep things
- Message content: not retained.
- Message identifiers: 24 hours.
- Hashed sender identifiers and account configuration: until the account stops using Whaat, then deleted within 30 days.
- Operational records: 12 months.
Your rights
Depending on where you live, you may have the right to access, correct, delete or port your personal data, to withdraw consent, and to object to or restrict certain processing. Residents of California have rights under the CCPA as amended by the CPRA, including the right to know what personal information is collected and to request its deletion; we do not sell or share personal information as those terms are defined there. Residents of the European Economic Area and the United Kingdom have rights under the GDPR. People in Colombia have rights under Law 1581 of 2012.
Where the account you messaged belongs to a business, that business is the controller of your data, so please direct requests to them. If you contact us at contact@shakeapp.today we will pass the request on and support them in answering it within the time the law allows.
You may also complain to your local supervisory authority — in the EEA, your national data protection authority; in Colombia, the Superintendencia de Industria y Comercio.
To delete data associated with a WhatsApp account, see Data deletion.
Children
Whaat is not directed at children. We do not knowingly process the personal data of anyone under 13.
Security
Access tokens are encrypted at rest with AES-256-GCM, every inbound webhook from Meta is cryptographically verified before it is acted on, and database access is restricted to the service itself. Report a security concern to contact@shakeapp.today.
Changes
We post updates here with a new "last updated" date, and tell subscribers directly about material changes.