Privacy Policy

Who operates DoneAsk

DoneAsk is operated by [Operator legal name required], [Business address required]. Contact: [Privacy email required]. This policy covers business owners, their customers and website visitors. Operator details and provider arrangements must be completed before public paid use.

Our roles

DoneAsk is responsible for account, billing, security and support data. Each business decides which customers to contact and why. For customer names, phone numbers, job details, messages and feedback, that business is the controller and DoneAsk processes data on its instructions. We do not acquire ownership of customer data.

Information we use

• Account information: your name, email, business details, country, language and settings. Email sign-in uses a password hash. Google sign-in, when configured, uses your Google account identifier, name and verified email; DoneAsk does not receive your Google password.
• Customer information: names, phone numbers, optional job notes, follow-up permission, messages, replies, feedback categories and opt-out records.
• Activity: prepared messages, WhatsApp handoffs, connected-service message events, errors and review-link visits. Opening WhatsApp does not prove sending. A review-link visit does not prove a review was posted.
• Billing information: subscription identifiers, status and payment events received from PayPal when checkout is enabled. PayPal handles payment credentials; DoneAsk does not store full card details.
• Necessary technical information such as session identifiers and server logs.

Why we use it

We use account data to provide the service, authenticate you, administer subscriptions, secure the system, respond to requests and meet legal obligations. On a business’s instructions, we use customer data to prepare or send follow-ups, collect and classify replies, record feedback, prevent duplicate or unwanted contact and provide review links. The business must obtain appropriate permission and give customers the required notice.

AI, WhatsApp and other providers

Relevant message text, names and job notes may be processed by the configured AI service to understand requests, draft replies and classify feedback. Hosting, database and AI providers process data needed to operate DoneAsk. Google sign-in and PayPal checkout operate under their own privacy terms. WhatsApp processes messages under its terms. Our temporary Baileys connection is restricted to internal testing and is not the official WhatsApp Business service. Official Meta production messaging is pending setup and verification.

Before public use, the operator must finalize the named provider list, paid AI data-processing terms, processing locations and applicable international-transfer safeguards. See the Data Processing Agreement, Google privacy policy, PayPal privacy statement and WhatsApp privacy policy.

Retention and deletion

Customer records, linked WhatsApp messages and feedback are scheduled for deletion after 12 months, unless deleted sooner or a legal obligation requires longer retention. Incoming messages that cannot be linked to a business are scheduled for deletion after 30 days. Deleting a customer removes the messages linked to that customer; deleting a business removes its linked message records. Deployment of the retention schedule and backup deletion periods must be confirmed before public use. Authentication sessions last up to 30 days. Account deletion is available in Settings. Minimal opt-out records may need to remain to prevent unwanted contact; billing records may be retained to meet legal obligations.

Your choices

Customers can reply STOP to a connected Chino conversation or ask the business to stop contact. Manual WhatsApp replies go to the business, which must honor them. Contact the business first for access, correction or deletion of its customer records, or contact [Privacy email required]. We assist with requests and applicable privacy rights. You may also contact your local privacy regulator.

Security and cookies

We use account-scoped access, password hashing, HTTPS in production and restricted credentials. No service is perfectly secure. Necessary cookies keep you signed in and secure the Google sign-in flow. DoneAsk does not use advertising cookies or marketing trackers. See the Cookie Notice.