Privacy Policy

Tabluey Pty Ltd (trading as Evo The Agent, "we", "us") provides a web platform that lets businesses connect their own WhatsApp Business numbers, run an AI agent and automated replies on each number, and manage follow-ups.

• For your account information, we are the responsible party (data controller).
• For WhatsApp conversations and contact details of your customers, you (the business that connected the number) are the responsible party, and we process that data on your behalf as an operator (data processor), only to provide the service.

We aim to comply with South Africa's Protection of Personal Information Act (POPIA) and, where applicable, the GDPR.

Account data: email address, password (stored hashed by our authentication provider), sign-in records and the display name you choose for your agent.

Business set-up data you enter: project names, business descriptions, the agent's name, question-and-answer blocks, "phrase & response" rules, AI behaviour rules (general, don't-respond and close-client rules, including any banking details or booking instructions you add), questions for the agent to ask, reply delays, switches and message templates.

WhatsApp connection data: your WhatsApp Business Account ID, phone number ID and connection status. Access credentials are held server-side and are never shown in the browser.

Conversation data from your customers, received through Meta's official WhatsApp Business Platform:

• phone number and WhatsApp profile name (WhatsApp does not share profile pictures with us);
• message text and timestamps, delivery and read statuses;
• media they send (photos, videos, voice notes, documents, stickers);
• past chat history that Meta shares when you connect an existing number and approve history sharing (Meta limits this to roughly the last 180 days, with media from about the last 14 days);
• messages you send from your own WhatsApp app, when Meta reports them to us;
• opt-out or consent status for follow-up messages.

Data we generate: AI reply drafts, lead indicators (for example "possible buyer" or "possible seller"), dashboard updates (unanswered questions, handoff and close-client alerts), records of which questions were asked or answered, follow-up reminders and notes you write to yourself, and scheduled-reply records.

Device data for notifications: if you turn on push notifications, your browser's push subscription endpoint and keys.

Guest mode: if you continue without an account, you see demo content only; AI features are blocked and we don't store business data for you.

• to show your inboxes, chats and media in Evo, separated per WhatsApp number;
• to send replies you write, phrase & response replies and AI agent replies through WhatsApp, after the delay you set, and to mark messages as read only when a reply is sent;
• to generate AI replies and drafts using only the information you provide (business description, Q&A, rules) and the conversation itself. If you switch on media understanding, images and videos are also analysed. The agent does not search the web;
• to flag potential leads, unanswered questions and situations you asked to handle yourself;
• to find older chats awaiting a reply and, where you enable it, send follow-ups using Meta-approved templates to contacts who have agreed to receive them;
• to remind you of future follow-ups and send push notifications that open the relevant chat;
• to secure the service, prevent abuse, fix problems and meet legal obligations.

We do not sell personal information, use your customers' conversations for advertising, or use your data to train general-purpose AI models.

Replies, drafts, lead detection and media understanding are produced by large language models accessed through our AI provider gateway. Conversation content is sent to these models only to produce the requested output. AI output can be wrong; you remain responsible for what your agent tells customers. You can switch the AI agent, automated replies and media understanding off at any time for each number; all are off by default.

• Meta Platforms (WhatsApp Business Platform) — to send and receive messages. Meta's own terms and privacy policy apply to WhatsApp.
• Hosting, database and authentication providers — to store and run the service.
• AI model providers — to generate replies and analyse content as described above.
• Browser push services — notifications carry no message content; your device fetches the notice from Evo after it arrives.
• Authorities — where required by law.

Some providers are located outside South Africa. Where data is transferred, we rely on providers bound by data-protection obligations comparable to POPIA.

We store conversations received by Evo to provide your inbox, saved history and follow-ups while your account and the relevant project remain active and there is a lawful, necessary purpose for keeping them. Data must not be retained indefinitely merely because it is available; applicable law, valid deletion requests and Meta's platform requirements may require earlier deletion.

The approximately 180-day limit on importing past chats is a history-sharing limit, not a 180-day expiry for messages already stored in Evo. Meta's own message-delivery and media-availability periods are also separate from Evo's retention of received conversations.

You can delete reminders, rules and projects in the app. Disconnecting a number stops its connection but does not by itself constitute a deletion request for saved history. To request deletion of associated conversations or account data, contact support@evotheagent.com. We will assess and action requests in accordance with applicable law, retaining information only where legally required or otherwise lawfully necessary. We will explain any applicable exception when responding to your request.

Data is encrypted in transit. Each user's projects are isolated by access rules so only the account owner can read them. WhatsApp credentials are only used server-side. No system is perfectly secure; if a breach affects your personal information, we will notify you and the Information Regulator as POPIA requires.

You may ask to access, correct or delete your personal information, object to processing, or withdraw consent. Customers who chat with a business using Evo should contact that business first; we will help the business respond. Contacts can reply "STOP" (or similar) to opt out of follow-ups. You may also complain to the Information Regulator of South Africa (inforegulator.org.za).

Because you decide whose messages are handled, you must have a lawful basis to process your customers' data through Evo, tell them you use automated tools where the law requires it, and only send follow-up templates to people who have agreed to receive them.

Evo is a business tool and is not intended for anyone under 18.

We may update this policy and will show the new date above; significant changes will be notified in the app or by email. Questions or requests: support@evotheagent.com.