Who we are
Wispli (“we”, “us”) is an AI automation agency based in Cairo, Egypt. We design, build, connect and host systems for businesses and run AI agents on them. We also run the Wispli desktop app for Windows and the Wispli Assist browser extension.
You can reach us about anything in this policy at [email protected], which is our only contact channel. Our website is https://wispli.com.
Where the law requires us to appoint a data protection officer, we will publish their contact details on this page.
Who this policy covers
This policy covers personal data about:
- Visitors to wispli.com.
- People who email us.
- Our client businesses and the people who work for them.
- Our clients’ customers and contacts, whose data we handle for our clients.
- People who use the Wispli app for Windows or the Wispli Assist browser extension (together, “the Wispli apps”).
Personal data is any information about a person that identifies them, directly or indirectly, such as a name, email address, voice, image or online identifier. Egyptian law treats some personal data as sensitive: data about physical or mental health, genetic and biometric data, financial data, religious beliefs, political opinions, security status, and all data about children.
What we collect and where it comes from
Website visitors
The website has no forms and no accounts. When you visit:
- Our servers and Cloudflare receive your IP address and basic request details, such as the page asked for, the time and your browser type. This is needed to show you the page and to protect the site from attacks.
- If you choose Allow in the cookie bar, Google Analytics records how you use the site, such as the pages you view, your approximate location and the type of device you use. See “Cookies and similar storage” below.
- If a page error happens, your browser sends our server at api.wispli.com the error message and its technical details (the stack), the page address, your browser’s user agent and a random session id. Our server also records the IP address the report came from.
People who email us
Enquiries go from your own email app to [email protected], and we receive what you send: your name, email address, message, any attachments, and any details about your business you choose to share.
Client businesses and their staff
When you talk to us about work or become a client, we collect what we need to run the engagement: the names, job titles, email addresses and phone numbers of your team, billing details, the agreement, our messages, and the access you give us to your accounts and systems. Most of it comes from you and your team.
Our clients’ customers and contacts
When we build, host or run systems for a client, those systems hold data about the client’s customers, guests, patients, leads and contacts. Examples are names, phone numbers, email addresses, messages and chats, bookings, orders and payment status. For a clinic, this can include appointment and health information. The data comes from the people themselves (for example when they message the business or book online), from the client’s own records, and from public sources such as business directories and websites when the client asks our agents to find leads.
See “Data we handle for our clients” below for how this works.
Users of the Wispli apps
- Account details: your name, email address and sign-in details, handled through our sign-in provider Clerk.
- Voice audio you record for transcription, and the text you ask the app to format, translate or check.
- Custom vocabulary and shortcuts you add.
- Usage statistics, such as word counts and which features you use.
- Device and technical details, such as your operating system, app version and error logs.
- For the Wispli Assist extension: the text of the post you ask it to respond to, the platform, the tone or style you choose, and any short bio or note you add.
- Your plan and payment status, from our payment provider Lemon Squeezy. We never see your card details.
Why we use data, and our legal basis
Egyptian law allows personal data to be processed when you have consented, when it is needed for a contract with you or for steps before one, when the law, a competent investigating authority or a court requires it, or when it is needed for our legitimate rights and does not conflict with your basic rights and freedoms. This is what we rely on:
- Showing and protecting the website, and fixing errors: our legitimate right to a working, secure site.
- Website analytics: your consent, given in the cookie bar. You can withdraw it at any time.
- Replying to your emails: you give us your details to get a reply, which the law treats as consent for that purpose only. We use them for nothing else unless you agree.
- Proposals, client work, invoicing and support: the contract with the client, or steps you asked for before one, and the tax and accounting laws we must follow.
- Handling our clients’ customer data: the client’s instructions under its agreement with us. The client decides the purpose and its own legal basis.
- Running the Wispli apps, your account, billing and support: the contract with you.
- Preventing fraud, abuse and security incidents, and enforcing our terms: our legitimate rights.
- Meeting our legal duties and lawful requests from courts and competent authorities: legal obligation.
We only send you marketing messages if you have agreed to receive them. Each one says it is from Wispli, says it is marketing, and gives you an easy way to stop. We do not sell personal data.
If we want to use your data for a new purpose, we will first ask for your consent where the law requires it.
Data we handle for our clients
When we build, host or run systems for a client, the client decides why and how its customers’ data is used. Under Egyptian law the client is the controller and we are the processor. We process the data only on the client’s written instructions, under the client agreement, and only to provide our services to that client.
We keep the data confidential and secure, limit access to the people who need it, and delete it or hand it back when the work ends, as the agreement sets out.
The client is responsible for having a lawful basis, informing its customers, and getting any consent and licence the law requires. This matters most for sensitive data, such as patient data at a clinic, and for marketing messages.
If you are a customer of one of our clients and want to see, correct or delete your data, please contact that business directly. If you contact us instead, we will pass your request to the business and help it respond.
AI agents and the gates
Our AI agents work on our clients’ systems around the clock. They answer customer messages and email, find leads, do research and daily analysis, carry out daily operational tasks and suggest improvements to the business.
Every agent action passes a gate that the client sets for each agent:
- Closed: the agent does not act.
- Ask me: the agent prepares the action, and nothing happens until a person at the client approves it.
- Autopilot: the agent acts on its own and reports what it did.
Gates can carry limits, such as spending caps. The client decides which gate each agent uses and can change it.
To do their work, agents send data to AI model providers, which are named in each client’s agreement. Those providers process the data to produce the agent’s output.
AI can make mistakes. That is why actions that matter can stay on Ask me, so a person checks them first. If you deal with one of our clients and want a person to review something an agent did or decided, ask that business. You also have the right to object to processing, or its results, that conflicts with your basic rights and freedoms (see “Your rights”).
Where data is stored, and transfers outside Egypt
Our servers are in Germany, rented from Hetzner. Cloudflare runs a global network, so your connection may pass through its servers in other countries. Google, Groq, Clerk, Lemon Squeezy and the AI model providers named in client agreements may process data in the United States, the European Union or other countries.
This means personal data leaves Egypt. Egyptian law allows that only under conditions: the destination must protect data at least as well as Egyptian law does, the transfer needs a licence or permit from the Personal Data Protection Center (PDPC), and your consent is needed unless the law says otherwise. We will transfer personal data outside Egypt only as the law allows, including getting any licence, permit or consent it requires, and we will ask for your consent clearly where it is needed.
How long we keep data
We keep personal data only as long as we need it for the purpose we collected it for, or as long as the law requires. After that we delete it, or make it anonymous so it no longer identifies you.
- Website analytics: Google Analytics deletes detailed event data after the period set in our account, which is at most 14 months.
- Error reports: only as long as we need them to find and fix problems.
- Emails: as long as needed to deal with your enquiry and any work that follows from it.
- Client data: for the length of the engagement, then returned or deleted as the client agreement says.
- Contracts, invoices and payment records: as long as tax and commercial laws require.
- Voice audio in the Wispli app: sent for transcription and not stored permanently.
- Usage statistics in the Wispli apps (word counts, feature use): up to 2 years.
- Wispli app account data: while your account is active. You can ask us to delete your account and its data at any time.
Some technical records, such as server logs, may be kept longer where the law requires it. For example, Egypt’s Anti-Cyber and Information Technology Crimes Law No. 175 of 2018 requires the service providers it covers to keep certain logs for 180 days.
How we protect data
We use technical and organisational measures to protect personal data, such as encrypted connections (HTTPS), access limited to the people who need it, and Cloudflare’s security services. No system is completely secure, but we work to keep the risks low.
If a breach affects your personal data, we will notify the PDPC within 72 hours of becoming aware of it, and notify you within 3 working days after that, telling you what we have done, as the law requires. If the breach involves data we process for a client, we will also tell the client without delay so it can meet its own duties.
Your rights
Under Egyptian law, you have the right to:
- Know what personal data we hold about you, see it and get a copy.
- Withdraw consent you gave us before.
- Ask us to correct, update, add to or erase your data.
- Limit our processing of your data to a specific scope.
- Be told about any breach of your personal data.
- Object to processing, or its results, if it conflicts with your basic rights and freedoms.
Withdrawing consent does not affect processing we carried out before you withdrew it.
How to use your rights
Email [email protected] and tell us what you want. If you use the Wispli apps, write from the email address on your account. We may ask you to confirm who you are before we act.
We will reply within 6 working days of receiving your request, as the law requires. The law allows the PDPC to set a fee for some requests. If a fee ever applies, we will tell you before we act. Being told about a breach of your data is always free.
If we hold your data for one of our clients, we will pass your request to that business, which decides on it, and help it reply.
How to complain
If you are not happy with our answer, or we do not answer in time, you can complain to the Personal Data Protection Center (PDPC), Egypt’s data protection regulator, through its official website at https://www.pdpc.gov.eg. The PDPC must decide on a complaint within 30 working days. You can also go to court.
If you live outside Egypt, the law where you live may give you further rights. Email us and we will help.
Children
Our website and apps are for adults and businesses. They are not meant for anyone under 18, and we do not knowingly collect personal data from children. Egyptian law treats all data about children as sensitive and requires the consent of a parent or guardian. If you think a child has given us personal data, email [email protected] and we will delete it.
When a client’s systems hold data about children, such as a clinic’s young patients, the client must get the consent of a parent or guardian, and any licence, that the law requires.
Changes to this policy
We may update this policy when our services or the law change. We will post the new version here with a new date. If a change is significant, we will also tell clients and app users by email or in the app before it takes effect.
Contact us
For any question about this policy or your data, email [email protected] and we will reply.
Wispli, Cairo, Egypt. Website: https://wispli.com