Privacy Policy

Wemito is an AI-powered CRM built for rental businesses — helping them manage bookings, inventory and customer conversations from Zalo, Messenger, WhatsApp, Instagram, email and their website in one place.

Wemito is B2B2C: our direct customers are rental businesses ("tenants") who sign up for and operate the product. In the course of running the CRM, we also process personal data about the tenant's own customers — people who never signed up with Wemito directly. For that data, the rental business is the data controller (they decide why and how their customers' data is used), and Wemito acts as the data processor, handling it only on the tenant's behalf and instructions.

This policy explains both relationships: what we collect and do as the platform tenants use, and what we do with end-customer data on a tenant's behalf.

Tenant and staff account data: name, email address, role/permissions, workspace and business details, and account activity needed to run the service.

End-customer data, ingested through the product as tenants use it: display name, username or handle, profile photo, message content, phone number, email address, and rental or booking records (items rented, dates, pricing, deposits, status).

We receive data from the channels a tenant connects — Instagram, Facebook Messenger, WhatsApp and Zalo — as well as email, web forms on the tenant's site, and direct entry by the rental business's own staff into the CRM.

We use this data to operate the CRM: routing conversations from every channel into one shared inbox, managing rentals and bookings, generating AI-assisted reply drafts and conversation summaries, and providing product security and customer support.

To generate reply drafts, summaries and suggested actions, message content and related CRM context may be sent to third-party large language model (LLM) providers. This happens per request, only to operate the service the tenant is using.

Content sent to these providers is not used to train their models.

We share data with: the channel providers that carry a conversation (Meta for Instagram/Messenger, Zalo), the infrastructure and hosting providers that run Wemito, the LLM providers used for AI features, and authorities where required by law.

Wemito does not sell personal data.

Every record in Wemito is scoped to a single tenant — one rental business's data is never visible to another. Channel credentials (API keys and tokens) are encrypted at rest. Access is limited to a tenant's own authorised staff.

We keep data for as long as a tenant's account is active and as needed to provide the service, then delete or anonymise it. The specific retention window is [retention period — to be confirmed].

You may have rights to access, correct, delete or object to the processing of your personal data. If you are an end-customer, you should normally contact the rental business you interacted with, since they control your data. You may also contact Wemito directly using the details below.

To request deletion of your data, email us at [email protected] with the account or profile identifier the data is associated with (e.g. the phone number, email, or username you used to message a rental business).

We will delete or anonymise the associated personal data held by Wemito, subject to any legal retention requirements, and respond within [timeframe — to be confirmed].

Wemito is not directed at children and is not intended for use by children.

Data may be processed on servers outside Vietnam by our infrastructure and AI providers.

If we make material changes to this policy, we will update the date at the top of this page and notify tenants.

Questions about this policy or your data can be sent to [email protected].

Registered business: [registered business name and address — to be confirmed].