Privacy Policy

Go Talk IQ is operated by Pinnacle Media FZC, a company registered in Sharjah, United Arab Emirates. Contact us at [email protected].

There are two different relationships here, and the difference matters.

Your own account data

We are the controller. We decide what is collected and why.

Your customers’ conversations

You are the controller and we are the processor. We hold and process those messages on your instructions, not on our own account. What you may lawfully do with them is your responsibility.

Account details

Your name, work email, organisation name, and a hashed password. We never store a password we can read.

Conversations

The WhatsApp messages your team sends and receives, including attachments, and the contact details attached to them — a name and phone number, and anything else your customers type.

What you teach the assistant

Documents, links and notes you add, and your price list or offerings.

Usage

Message counts, AI usage, which numbers are connected, and audit records of significant actions such as adding a person or changing a plan.

Billing

What you paid and when. Card details are handled by Stripe and never reach our servers.

Technical

IP address and browser information when you sign in or sign up, kept to protect the account and to record who accepted our terms.

To provide the service

Performance of our contract with you. Delivering messages, running the assistant, keeping your data where you can reach it.

To bill you

Performance of our contract, and our legal obligations for tax records.

To keep the platform secure

Our legitimate interest in preventing abuse, and yours in an account nobody else can reach.

To support you

Performance of our contract. We look at your data when you ask us to help, and otherwise we do not.

To tell you something important

Our legitimate interest — a failed payment, a number that has been restricted, a change to these documents. These are not marketing and cannot be turned off while you have an account.

We do not sell personal data. We do not share it with advertisers. We do not use your customers’ messages to train AI models — messages go to our AI provider only to produce a reply for you, under terms that prohibit training on them.

We do not read your conversations except when you ask us to help with something, or where we must to investigate abuse or comply with the law.

We use a small number of sub-processors. Each one is here because the service cannot work without it.

Anthropic

The AI assistant. Receives the conversation being answered and the material you taught it. Does not train on it.

Stripe

Payments. Receives your billing details and card data directly — card numbers never reach us.

Meta Platforms

WhatsApp itself. Every message passes through Meta, under their terms, whatever we do.

Our hosting provider

The servers and database where your data lives.

Our email provider

Transactional email — verification links, password resets, notifications.

We will keep this list current and tell you before adding a new sub-processor that handles your data.

Conversations and contacts

For as long as your account exists. We do not delete your history on a schedule — losing a customer record you still need would be the worse failure.

After you close your account

30 days, so you can export it, and then deleted.

Billing records

As long as tax law requires, which is longer than the account itself.

Audit and security records

12 months.

A number that is disconnected or restricted does not lose its conversations. They stay readable for as long as the account does.

Our servers are in the European Union. Our sub-processors may process data elsewhere, including the United States, under the safeguards their own terms provide — standard contractual clauses where the law requires them.

WhatsApp messages necessarily pass through Meta’s infrastructure, wherever that is, before they reach us at all.

Depending on where you are, you may have the right to see the personal data we hold about you, to correct it, to have it deleted, to object to or restrict how we use it, to receive a copy in a portable form, and to complain to a supervisory authority.

Write to [email protected] and we will answer within 30 days.

If your request is about a message one of our customers received from you — rather than about your own account with us — we will pass it to them, because they are the controller of that data and we are not. We will tell you that we have.

Data is encrypted in transit. Passwords are hashed and never stored in a readable form. Each organisation’s data is separated at the database layer, so one customer’s account cannot reach another’s. Access by our staff is limited to what support requires and is recorded.

No system is perfectly secure. If a breach affects your data we will tell you without undue delay, and tell you what we know rather than waiting until we know everything.

Go Talk IQ is a business product and is not for anyone under 18. We do not knowingly collect data from children. If you believe a child’s data has reached us through your account, tell us and we will remove it.

We may update this policy. For a material change we will give at least 30 days’ notice by email to your administrators. The version and date at the top always say which one you are reading.