Privacy Policy

2.1 Personal Information

We may collect personal information that can identify you such as your name, email address, phone number, company information, and other information you provide when you:

• Create an account or register for our services
• Fill out forms or submit inquiries
• Subscribe to newsletters or marketing communications
• Participate in surveys, contests, or promotions
• Request customer support

2.2 Automatically Collected Information

When you visit our website or use our services, we may automatically collect certain information about your device and usage, including:

• IP address and location information
• Device information (browser type, operating system, device type)
• Usage data (pages visited, time spent, referring websites)
• Cookies and similar tracking technologies
• Log data and analytics information

• Providing, maintaining, and improving our services
• Processing transactions and managing your account
• Responding to your requests and inquiries
• Sending administrative information, updates, and marketing communications
• Personalizing your experience and delivering relevant content
• Analyzing usage patterns and optimizing our website and services
• Protecting against unauthorized access and ensuring security
• Complying with legal obligations

• Essential Cookies: Necessary for the website to function properly
• Analytical/Performance Cookies: Allow us to recognize and count visitors and analyze website usage
• Functionality Cookies: Enable the website to remember choices you make
• Targeting Cookies: Record your visit, pages visited, and links followed

• With Service Providers: Third-party vendors and service providers who perform services on our behalf (such as payment processing, data analysis, email delivery, hosting services)
• For Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business
• For Legal Compliance: If required to do so by law or in response to valid requests by public authorities
• With Your Consent: With your consent or at your direction
• To Protect Rights: To protect and defend our rights, property, and safety, or those of our users or third parties

• The right to access personal information we hold about you
• The right to request correction of inaccurate information
• The right to request deletion of your information
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent
• The right to lodge a complaint with a supervisory authority

8.1 What Whats91 MCP Is

Whats91 MCP lets you connect a supported AI assistant to a fixed set of approved Whats91 tools and account-specific information, using the open Model Context Protocol. The integration only operates after you sign in and explicitly authorize it — it does not give an assistant unrestricted access to your account or our database.

8.2 Data We May Receive Through the Integration

Depending on the tool you use, we may receive or process:

• Account identifiers needed to authenticate the connection (for example, your Whats91 user ID)
• OAuth authorization information and the permission scopes you grant
• The specific request or relevant prompt content passed to the tool you invoke
• Tool arguments necessary to complete that request
• The Whats91 account data required to produce the requested result (for example, message-delivery figures for a report you asked about)
• The tool output returned to your AI assistant
• Connection, security, consent and audit records
• Technical logs needed for security, troubleshooting, abuse prevention and reliability

What we do not receive

We do not receive your complete ChatGPT (or other assistant) conversation history. We process only the information sent to our MCP endpoint for the specific tool operation you request.

8.3 Why We Process This Data

We process this data to:

• Authenticate you and establish the MCP connection
• Verify the permissions and scopes you have granted
• Execute the tool you requested
• Return the requested result to your assistant
• Prevent unauthorized or abusive use
• Maintain security and service reliability
• Troubleshoot failures
• Keep legally required or security-related audit records
• Comply with applicable law

8.4 Data Minimization

Whats91 MCP is designed to request and return only the data reasonably necessary for the tool you selected and the request you made — not your broader profile or unrelated account data collected "just in case."

8.5 OpenAI and Other AI Platforms Are Independent Services

When you enable the Whats91 app or connector inside ChatGPT (or another supported assistant), that platform may send relevant portions of your request to Whats91 so the tool can operate. Whats91 processes that data under this Privacy Policy. OpenAI (or the relevant assistant provider) separately processes information under its own applicable terms and privacy policies, and Whats91 does not control that independent processing. We encourage you to review the privacy policy of any AI assistant or platform you connect, in addition to this one. This integration does not imply that OpenAI endorses, certifies, sponsors or partners with Whats91.

8.6 Authentication and Permissions

Access to your account-specific information always requires authentication and your explicit authorization:

• You authorize the connection through the applicable OAuth sign-in flow — Whats91 does not share your Whats91 password with the assistant
• Access is limited to the scopes and capabilities you approve; a connected assistant cannot automatically access every part of your Whats91 account
• Read and write permissions are handled separately
• Sensitive or state-changing actions may require an additional confirmation step where implemented

8.7 Where Tool Results May Be Sent

Requested results may be returned to the AI assistant or platform you chose to connect (for example, ChatGPT), and may pass through hosting, infrastructure, security or monitoring providers we use to operate the integration, subject to the same safeguards described elsewhere in this Policy. We disclose information to authorities or professional advisers only where already described in this Policy or required by law. We have not identified a named, MCP-specific subprocessor beyond our existing service providers; if that changes, it will be reflected in our vendor disclosures.

8.8 Retention

We retain information related to the MCP integration only for as long as reasonably necessary to provide the integration, maintain security, meet legal obligations, resolve disputes and enforce agreements. Disconnecting the integration immediately revokes the authorization token, so the assistant can no longer make new requests on your behalf; it does not necessarily erase security, audit or troubleshooting records already created before disconnection, which may be kept for the period described above.

Note for legal/product review

Exact retention periods for MCP connection records, audit logs, and tool request/response data have not been finalized or confirmed for publication. The transparent retention criteria above applies until specific day/month figures are confirmed by the product owner and reviewed by counsel.

8.9 Your Controls

You can:

• Review the permissions requested before you connect
• Decline authorization
• Disconnect or revoke the MCP connection at any time
• Re-authorize when requested permissions change
• Request access to, correction of, or deletion of your information, as described in Section 7
• Delete your Whats91 account through our existing account-deletion process
• Contact us about privacy concerns using the details in Section 13

8.10 Information You Should Not Submit

Please do not intentionally submit the following through a ChatGPT app or Whats91 MCP integration, since none of it is required for any Whats91 MCP tool to function:

• Passwords or authentication secrets
• API keys or access tokens
• One-time passcodes or MFA codes
• Payment card information
• Protected health information
• Government identification numbers
• Any other sensitive data not required for the tool you are using

8.11 International Transfers and Children

Where AI-integration data is processed outside your country — including by OpenAI or other assistant providers, or by our hosting providers — the International Data Transfers section of this Policy applies equally. Our Children's Privacy section also applies in full to the AI integration; it is not intended for use by children under the stated age.

8.12 Security Concerns

If you believe there has been unauthorized access to your account through this integration, or you have another security concern, please contact us immediately using the details in Section 13. We do not publish internal incident-response procedures here.