Privacy Policy

Last Updated: June 30, 2026

1. Information We Collect

When you use our AI assistant via WhatsApp, SMS, or web chat:

• WhatsApp/SMS: We receive your phone number or anonymous Business-Scoped User ID (BSUID) and message content via Twilio. If you use WhatsApp's username feature with phone number hidden, we only receive your anonymous BSUID — not your phone number.
• Web Chat: No login, no phone number, no personal information required. A random session ID is generated in your browser and is not linked to your identity.
• We do not collect your name, email, or location unless you voluntarily share it in a message.

2. How We Use Your Information

• To process your messages and deliver AI-generated responses
• To maintain conversation context for a personalized experience
• To deliver daily subscription content you explicitly opted into
• To improve the quality and accuracy of our service
• To comply with legal obligations

3. Data Storage & Retention

• User personal information is not stored beyond what is needed for service delivery
• Conversation context is retained for up to 24 hours to support session continuity, then automatically deleted
• Conversation logs are anonymized — your identity is replaced with an irreversible hash before storage. Logs auto-delete after 30 days.
• Your phone number is never sent to our AI model — only an anonymous identifier
• Subscription preferences are stored until you unsubscribe (send UNSUB or STOP)
• Web chat history is stored only in your browser's local storage — we have no server-side copy
• All data is encrypted at rest and in transit using AWS infrastructure
• System logs retain only hashed identifiers (not phone numbers) and auto-expire after 7 days

4. Third-Party Services

We use the following services to power our assistant:

• Twilio — message delivery (WhatsApp, SMS)
• AWS Bedrock AgentCore — AI processing (receives anonymous ID only, never phone)
• Google Gemini — real-time information grounding and transcription
• Google Translate — language translation (200+ languages)
• OpenAI — audio transcription (Whisper) and image analysis (Vision)
• API.Bible — Bible verse data
• Musixmatch — song lyrics
• Wolfram Alpha — math and science computation

These services may process your message content to generate responses. We do not sell, share, or provide your personal information to third parties for marketing purposes.

5. Data Sharing

We do not share your personal information with third parties except as required to operate the service (as listed above) or to comply with legal requirements.

6. WhatsApp Username Privacy

We support WhatsApp's username feature. If you choose to hide your phone number:

• We receive only your anonymous Business-Scoped User ID (BSUID)
• Your phone number is never visible to us
• All features work identically — subscriptions, replies, daily updates
• The BSUID is unique to our business and cannot be used to identify you elsewhere

7. Your Rights

• Request deletion of your data at any time by contacting team@inspireimpact.llc
• Stop all subscriptions by sending STOP on WhatsApp or SMS
• Clear web chat history using the "+" button in the chat interface
• Use WhatsApp's username feature to interact without revealing your phone number

8. Children's Privacy

This service is not directed at children under 13. We do not knowingly collect information from children under 13.

9. Security

We implement industry-standard security measures including:

• Encryption at rest and in transit (AWS AES-256, TLS 1.2+)
• PII never sent to AI models — only salted, irreversible hashes
• All system logs use hashed identifiers — no raw phone numbers in any log
• CORS origin restrictions on web APIs
• Per-session rate limiting
• No authentication tokens or passwords stored
• Automatic data expiration via TTL policies (7-day logs, 30-day conversation data)

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.