← Back to Region Selection
Last Updated: November 25, 2025
1. Data Controller
Sisters-On-WhatsApp ("we", "us", "our") operates as the data controller for personal data collected through our WhatsApp chatbot service.
Contact: privacy@sisters-whatsapp.com
2. Personal Data We Collect
We collect and process the following personal data:
- Phone Number: Used for identification and communication
- Conversation History: Messages exchanged with our AI sisters
- Language Preference: Detected from your messages
- Consent Records: Your privacy choices and timestamps
3. Legal Basis for Processing (GDPR Article 6)
- Consent (Art. 6(1)(a)): You provide explicit consent before using our service
- Contract Performance (Art. 6(1)(b)): Processing necessary to provide the chatbot service
- Legitimate Interests (Art. 6(1)(f)): Service improvement and security
4. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of Access (Art. 15): Request a copy of your data
- Right to Rectification (Art. 16): Correct inaccurate data
- Right to Erasure (Art. 17): Request deletion of your data - Send "DELETE" via WhatsApp
- Right to Data Portability (Art. 20): Receive your data in a portable format - Send "EXPORT" via WhatsApp
- Right to Withdraw Consent (Art. 7): Withdraw consent at any time
- Right to Object (Art. 21): Object to certain processing
- Right to Lodge a Complaint: Contact your local Data Protection Authority
5. Data Security
We implement appropriate technical and organizational measures:
- Encryption: All conversation data is encrypted using AES-256
- Access Control: Strict access limitations to personal data
- Secure Transmission: All communications via HTTPS/TLS
6. Data Retention
- Conversation history: 90 days of inactivity, then automatically deleted
- Consent records: Retained for compliance documentation
- You can request immediate deletion at any time by sending "DELETE"
7. Data Sharing
We do NOT sell, rent, or share your personal data with third parties, except:
- AI service providers (for generating responses) - under strict data processing agreements
- When required by law or legal process
8. International Transfers
Your data may be processed outside the EU. We ensure adequate protection through:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions where applicable
9. Automated Decision-Making
Our service uses AI to generate responses. This does not constitute automated decision-making with legal effects under GDPR Article 22.
10. Children's Privacy
Our service is not intended for children under 16. We do not knowingly collect data from children.
11. Changes to This Policy
We may update this policy periodically. Significant changes will be communicated via WhatsApp.
12. Contact Us
For any privacy-related inquiries:
- Email: privacy@sisters-whatsapp.com
- WhatsApp: Send "DELETE" or "EXPORT" for data requests