1. Overview
WaHoOLA ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our products and services.
We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and the Spam Act 2003 (Cth).
2. Information We Collect
2.1 Information You Provide
- Account information: Name, email address, company name, phone number (when registering for a WaHoOLA account)
- Payment information: Billing details processed securely via Stripe. We do not store your credit card numbers on our servers.
- Content you submit: Emails for rewriting, construction job details, safety document inputs, invoice data, scripts, and any other content you provide to our products
- Preferences: Settings such as email signatures, default tones, business profiles, and notification preferences
- Communications: Messages you send to our support team
2.2 Information Collected Automatically
- Usage data: Pages visited, features used, rewrite counts, and product interactions
- Device information: Browser type, operating system, screen resolution
- Log data: IP address, access times, referring URLs
- Cookies: As described in our Cookie Policy
2.3 Information from Third Parties
- Stripe: Payment confirmation and subscription status
- Browser extensions: When using the AI Email Rewriter Chrome extension, email content you choose to rewrite is sent to our servers for processing
3. How We Use Your Information
We use your information to:
- Provide and operate our products and services
- Process AI requests (e.g., rewriting emails, generating quotes, creating safety documents)
- Process payments and manage subscriptions
- Save your rewrite/generation history for your reference
- Send account-related communications (password resets, subscription confirmations)
- Improve our products based on aggregated, anonymised usage patterns
- Respond to support requests
- Comply with legal obligations
4. AI Processing and Your Content
When you use our AI-powered features:
- Your content is sent to our AI infrastructure (self-hosted Ollama) for processing
- We do not use your content to train AI models
- Your content is not sent to third-party AI providers (e.g., OpenAI, Google, Anthropic) unless explicitly stated
- AI outputs are saved to your personal history only, accessible only by you
- You can delete any item from your history at any time
For Private AI installations, all processing occurs on your own hardware. No data leaves your premises.
5. Data Storage and Security
- Account data is stored in encrypted databases on Australian-hosted infrastructure
- Passwords are hashed using bcrypt (never stored in plain text)
- Authentication uses JWT tokens with expiration
- All connections use HTTPS/TLS encryption in transit
- Payment processing is handled entirely by Stripe (PCI DSS compliant). We never see or store full card numbers.
6. Data Sharing
We do not sell your personal information. We share data only in these circumstances:
- Stripe: Payment and subscription data for billing purposes
- Legal requirements: If required by Australian law, court order, or government authority
- Business transfers: In connection with a merger, acquisition, or sale of assets (you would be notified)
We do not share your content (emails, quotes, invoices, scripts, etc.) with any third party.
7. Data Retention
- Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
- Content history: Retained until you delete it, or until 30 days after account deletion.
- Usage logs: Retained for 12 months for operational purposes, then anonymised or deleted.
- Payment records: Retained as required by Australian tax law (typically 7 years).
8. Your Rights
Under Australian privacy law, you have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your account and associated data
- Complaint: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached your privacy
To exercise any of these rights, email support@wahoola.com.au.
9. Children's Privacy
Our Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
10. International Data
Our services are primarily hosted in Australia. If you access our Services from outside Australia, your information may be transferred to and processed in Australia. By using our Services, you consent to this transfer.
11. Chrome Extension
The AI Email Rewriter Chrome extension:
- Only accesses email content when you explicitly click the "Rewrite" button
- Does not read, scan, or monitor your emails in the background
- Sends only the selected email text to our servers for rewriting
- Stores your authentication token locally in Chrome storage
- Does not collect browsing history, keystrokes, or other data
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on our website. The "Last updated" date at the top of this page indicates when the policy was last revised.
13. Contact
For privacy-related questions or requests:
WaHoOLA — Privacy
Email: support@wahoola.com.au
Canberra, ACT, Australia
You may also contact the Office of the Australian Information Commissioner if you have concerns about how we handle your personal information.