Privacy Policy

• Account information: your name, email address, and profile photo from the identity provider you sign in with (currently Google; sign-in only, no mailbox access is requested at sign-in).
• Setup details: the preferences you choose when you get started (what Wagt should handle, plan, language) and your phone number, used to deliver a verification code via Telegram.
• Conversations: messages between you and your assistant, kept so the assistant has context and you have history.
• Assistant memory: facts and preferences the assistant saves to help you (for example key people or standing preferences). You can view and delete these in your dashboard.
• Connected-app content: when you connect an app (for example Gmail or a calendar), the assistant accesses its content only to carry out your requests and the automations you enable. OAuth tokens for connected apps are stored by our connector platform (Composio), not on our servers.
• Billing: subscription status and invoices from our payment provider, and, where a free trial was started, the identifier and amount of the SAR 1 verification charge so we can confirm it was refunded. We never see or store your card number: the card form is served by the payment provider inside its own frame.
• Usage and logs: technical events needed to run, secure, and improve the service.

To provide the assistant (including sending your requests and relevant context to large language model providers for processing), to deliver notifications you asked for, to operate billing, to keep the service secure, and to improve it. We do not sell personal data, and we do not use the content of your connected accounts to train AI models.

Only processors needed to run Wagt: cloud hosting, the connector platform that holds app authorizations (Composio), large language model providers that process conversation text to generate responses (OpenRouter, and the providers it routes to: Google, DeepSeek and Z.ai), our payment provider (for billing), and Telegram (to deliver messages you requested). Each receives only what it needs. We may disclose information if the law requires it.

We keep your data while your account is active. You can delete individual memories from the dashboard, disconnect apps at any time, and request full account deletion by emailing [email protected]. We delete your workspace data within 30 days, except records we must keep for legal or billing reasons. If you ask to hear when the iPhone app is ready, we keep that email address only until we have told you, and delete it 30 days after that message.

Data is encrypted in transit, access is limited to what the service needs, and irreversible assistant actions (like sending an email) require your explicit confirmation by design. No system is perfectly secure; if a breach affects your data we will notify you as the law requires.

Subject to applicable law, including the Saudi Personal Data Protection Law (PDPL), you may request access to, correction of, or deletion of your personal data, and object to or restrict certain processing. Contact [email protected] to exercise these rights.

If we materially change this policy we will notify you (for example by email or in-product) before the change takes effect. The “Last updated” date above always reflects the current version.