Privacy Policy
Last updated: 15 April 2026
Introduction
Welwitech Trading FZ-LLC (hereinafter « we »), registered under number CWEP5711 and with its registered office at Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates, the operator of the Settyn platform, is committed to protecting the privacy of its users. This privacy policy describes the personal data we collect, how we use it, and the rights available to you under the General Data Protection Regulation (GDPR).
Data Collected
We collect the following categories of data:
- Identification data: last name, first name, e-mail address, phone number.
- Connection data: IP address, browser type, pages visited, timestamps.
- Payment data: billing information processed by our providers Whop and Stripe. We never store your bank card numbers.
- Messaging data: the content of DM conversations processed by the AI as part of the service.
- Usage data: actions performed on the platform, preferences, account settings.
Use of Data
Your data is used for the following purposes:
- Provision, management and improvement of the Settyn service.
- Processing of payments and management of subscriptions via Whop and Stripe.
- Generation of conversational AI responses via Anthropic's Claude API.
- Authentication and securing of accounts via Firebase (Google).
- Communication relating to the service (notifications, updates, support).
- Statistical analysis and improvement of the user experience.
Data Sharing
We never sell your personal data. We share your data only with the following data processors, which are necessary for the operation of the service:
- Firebase (Google): authentication and data storage. Data hosted in the European Union.
- Anthropic (Claude): AI processing of conversations. Data is transmitted securely to generate conversational responses. Location: US.
- Whop: payment processing and subscription management. Whop is PCI DSS certified. Location: US.
- Stripe: payment processing and subscription management. Stripe is PCI DSS Level 1 certified. Location: US.
- PostHog: product analytics and usage tracking (pages visited, interactions with features). Data: anonymous user identifier, page URLs, feature interactions. Location: EU/US.
- Meta (Facebook/Instagram): DM automation via the Instagram Graph API and the Messenger Platform. Data: message content, user profiles. Location: US.
- WhatsApp (Meta): business messaging via the WhatsApp Cloud API. Data: message content, phone numbers. Location: US.
- Telegram: messaging via the Telegram Bot API. Data: message content, usernames. Location: various.
- Calendly: appointment scheduling automation. Data: meeting details, invitee e-mail and name. Location: US.
- Cal.com: alternative appointment scheduling platform. Data: meeting details, invitee information. Location: EU.
- Slack: notifications. Data: lead names, booking information, alert messages. Location: US.
- GoHighLevel: CRM synchronization. Data: lead contact details, opportunity data. Location: US.
- Resend: transactional e-mails. Data: e-mail address, name. Location: US.
- OpenAI: generation of text embeddings for knowledge base search. Data: document fragments (no personal data). Location: US.
- Sentry: application error monitoring (no personal data transmitted, sendDefaultPii: false). Location: US.
Security
We implement appropriate technical and organizational measures to protect your personal data against any unauthorized access, loss, destruction or alteration. Communications are encrypted via HTTPS/TLS. Data stored in Firestore benefits from server-side encryption provided by Google Cloud (encryption at rest by default). Additional application-level encryption for the most sensitive data (conversation content, access tokens) is currently being deployed.
AI Processing of Message Content
As part of the service, the content of private messages (DMs) received on connected platforms (Instagram, Facebook, WhatsApp, Telegram) is transmitted to artificial intelligence models (Anthropic Claude, OpenAI) in order to generate automated conversational responses and to qualify leads.
Legal basis: this processing is based on the legitimate interest of the user (automation of sales qualification) as well as on the explicit consent obtained during the configuration of the service. You may withdraw your consent at any time by disabling AI automation from your account settings.
Conversation data is not used to train the AI models. It is transmitted exclusively to generate responses in real time and is subject to the respective privacy policies of Anthropic and OpenAI.
Your Rights (GDPR)
In accordance with the GDPR, you have the following rights:
- Right of access: obtain a copy of your personal data.
- Right of rectification: correct inaccurate or incomplete data.
- Right to erasure: request the deletion of your data.
- Right to portability: receive your data in a structured and readable format.
- Right to object: object to the processing of your data.
- Right to restriction: restrict the processing of your data.
To exercise these rights, contact us at the address indicated below. We undertake to respond within 30 days.
Cookies
Settyn uses cookies that are strictly necessary for the operation of the service (session cookies, Firebase authentication cookies). These cookies do not require your consent.
We also use analytics cookies via PostHog for statistical tracking and product improvement (pages visited, user journey, feature usage). These analytics cookies are only placed after your explicit consent, obtained via our cookie consent banner displayed on your first visit.
You may withdraw your consent or change your cookie preferences at any time from your account settings or via your browser settings. The withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.
Contact
For any question relating to this privacy policy or to exercise your rights, you may contact us:
- Company: Welwitech Trading FZ-LLC — Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates
- Email: support@settyn.com
You also have the right to lodge a complaint with the competent data protection authority — for example the CNIL in France.
