DeskWA

Privacy policy

Last updated 25 October 2026

DeskWA is operated by Algotech Labs (“we”). DeskWA lets businesses (“customers of DeskWA”) talk to, sell to and support the people who message them on WhatsApp (“end customers”). This policy explains what we collect and why.

Information we process

  • Business account data: names, email addresses and passwords (stored hashed) of business users, workspace settings and catalog content.
  • WhatsApp conversation data: end customers' phone numbers, WhatsApp profile names, and the messages exchanged with the business.
  • Order and payment data: items ordered, amounts, payment status and provider references. Card details are handled by Paystack and M-Pesa PINs by Safaricom; DeskWA never sees them.
  • Email addresses end customers choose to share for receipts.
  • Technical logs needed to run and secure the service.

How we use it

  • To deliver messages, answer questions, process orders and deliver purchased items on behalf of the business.
  • To send receipts and sale records by email.
  • To keep the service secure, prevent abuse, and meet legal obligations.

Message content may be processed by an AI model provider (Anthropic) to draft replies. It is used only to generate the response and not to train models on behalf of DeskWA.

Who controls the data

For conversations and orders, the business you are messaging is the data controller and DeskWA acts as its processor. Questions about how a specific business uses your data should go to that business. Each business's data is kept separate from every other business on DeskWA.

Sharing

We share data only with the service providers needed to run DeskWA: Meta (WhatsApp Business Platform), Safaricom (M-Pesa), Paystack, our email delivery provider, our hosting and storage providers, and our AI model provider. We do not sell personal data.

Retention and security

Business data is kept while the workspace is active and deleted on request. Credentials for WhatsApp and payment providers are encrypted at rest. All traffic is encrypted in transit (HTTPS).

Your rights

Under the Kenya Data Protection Act, 2019 and similar laws you may request access to, correction of, or deletion of your personal data. See our data deletion page or contact us through algotech.co.ke.