Privacy Policy

Vaem ("we", "us", or "our") is a product operated by Ooh Marketing Limited, committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform and related services.

Ooh Marketing Limited is a private limited company registered in England and Wales under company number 16860604. Our registered office is at Flat 18 Eton House, Anglian Close, Watford, England, WD24 4RF.

We collect the following categories of information:

Account Information: Name, email address, phone number, business name, and business type when you create an account.

Business Data: Business descriptions, services, FAQs, working hours, and other information you provide to train your AI chatbot.

Customer Contact Data: Phone numbers, names, and message histories of your WhatsApp customers, processed on your behalf as a data processor.

Usage Data: How you interact with our platform, features you use, pages you visit, and performance metrics.

Payment Information: Processed securely by Stripe. We do not store card details on our servers.

We use your information to provide and improve our services, including:

• Operating your AI chatbot and processing WhatsApp messages on your behalf.
• Managing your account, subscriptions, and billing.
• Sending service updates, security alerts, and support messages.
• Analysing platform usage to improve features and performance.
• Complying with legal obligations and preventing fraud.

We will never sell your personal data or your customers' data to third parties.

We share data only with the following parties and only as necessary to deliver our services:

Meta Platforms (WhatsApp Business API): To send and receive messages on behalf of businesses using our platform. Meta acts as an independent data controller for its own services.

OpenAI: To process AI chatbot responses. We minimise personal data shared and do not send identifying customer information where avoidable.

Stripe: To securely process subscription payments. Stripe is PCI-DSS compliant.

Clerk: For authentication and user account management.

We retain your account data for as long as your account is active. Message data is retained for 12 months unless you request earlier deletion. If you close your account, we will delete your data within 30 days, except where retention is required by law.

Under GDPR and UK data protection law, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your personal data.
• Portability — request your data in a structured, machine-readable format.
• Objection / Restriction — object to or restrict certain types of processing.

To exercise any of these rights, including requesting deletion of your data, email us at privacy@xpeak.io with the subject line "Data Deletion Request". We will respond within 30 days. You may also manage and delete your data directly from your account settings.

We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest, regular security audits, access controls, and secure infrastructure hosted on SOC 2-compliant providers.

We use essential cookies for authentication and session management. We use analytics cookies only with your consent to understand platform usage. You can manage cookie preferences through your browser settings.

Our platform integrates with Meta's WhatsApp Business API. By using Vaem, you acknowledge that messages sent via WhatsApp are also subject to WhatsApp's Privacy Policy and Meta's Data Policy.

For privacy-related questions or to exercise your data rights, contact our Data Protection Lead at privacy@xpeak.io.

Ooh Marketing Limited
Company No. 16860604
Flat 18 Eton House, Anglian Close, Watford, England, WD24 4RF