Privacy Policy

wamcp (the "Service", at wamcp.vimigo.io) is operated by ADEV Ventures Sdn Bhd (201701033720), Malaysia, the company behind vimigo ("vimigo", "we", "us"). We are the data controller for your account data. For the WhatsApp messages the Service handles on your behalf, we are a data processor acting on your instructions.

Contact: support@vimigoapp.com, with "Data Protection" in the subject line.

Your email address and card details are required: without them we cannot open an account or bill you. Your company name is optional. Linking a WhatsApp number is required for that number to work.

We use your data only to provide, bill, secure and support the Service. We send you service messages by email and WhatsApp: sign-in codes, purchase confirmations, disconnection alerts and referral credit notices. We do not send marketing messages.

We do not sell your data. We do not read your messages, except when debugging a fault, when you ask us to for support, when investigating abuse or a security incident, or where Malaysian law requires it. When our staff open your dashboard to help you, that visit is logged.

We do not use your messages to train AI models.

When you connect an AI client such as Claude, ChatGPT or Codex, that client fetches your messages through the Service and sends them to its provider (for example Anthropic or OpenAI). That provider handles the data under its own terms and privacy policy, which you accepted with them. You choose which client to connect. To cut one off, remove the connector in that client, or delete the number from your dashboard.

We share data only with service providers that help us run the Service:

When you pay, our sales team gets a WhatsApp notice with your email, company, the number's name and phone number, and a link to the invoice. We may also disclose data where Malaysian law or a valid court order requires it.

Your messages are stored on our servers in Kuala Lumpur, Malaysia. Stripe, Mailgun and Bright Data process account, billing and connection data outside Malaysia, and an encrypted copy of our daily backups, which include your messages, is held on Google Drive outside Malaysia. The Service cannot run without them. By using the Service you consent to that transfer under the Personal Data Protection Act 2010.

Your chats contain messages and numbers from your contacts and groups. You are responsible for having the right to let the Service and your AI assistant process them. Do not connect a number whose chats you are not entitled to share in this way.

• Messages: a rolling 180 days. Anything older is deleted automatically. Media files your AI assistant downloads are deleted with their message, and the download links it gets expire after 1 day.
• WhatsApp session and dedicated IP: deleted or released when the number's subscription ends. After a failed payment, the number stops working and we keep the session for 7 days, then delete it.
• Your chat list, contacts and group details: until the number is deleted.
• Technical logs: overwritten automatically, usually within a day.
• Account records: until you delete your account. Invoices stay with Stripe after that, as billing records.
• Security records (sign-ins, staff visits, changes to your account): kept after your account is deleted, with your email, phone number and IP address removed.
• Backups: one encrypted copy of our database a day, on our server and on Google Drive, each deleted after 7 days.

Each number runs in its own process with its own database schema. Your numbers' API keys and proxy passwords are stored encrypted, and sign-in sessions only as hashes. Traffic over the internet is encrypted. No system is perfectly secure.

You have the rights the Personal Data Protection Act 2010 gives you, including to access and correct your personal data. From your dashboard you can change your sign-in email and company name, delete a number, or delete your whole account. For a copy of your data or any other request, email support@vimigoapp.com.

We use one essential cookie to keep you signed in. If you arrive through an invite link, a second short-lived cookie remembers the invite until you sign up. We do not use advertising or tracking cookies.

The Service is not for anyone under 18.

When this policy changes, the new version is posted on this page.