Short answers to common questions about your data. The full details are in our Privacy Notice and Terms of Service.
1. AI training and memory
Does Wajo train AI models on my personal data?
We don’t use personal data, like your emails, texts, calls, or other personal communications, to train AI models. We may use de-identified data, which can’t reasonably be linked back to any person, to improve our services, including training AI models. This includes records of how our team completes tasks in Fo, with personal data removed. We won’t attempt to re-identify that data.
How do I opt out of training?
You don’t need to. We do not train AI models on your personal data, so there’s no opt-out setting or further action for you to take.
If there’s no training, how does my agent remember what I told it?
Your AI agent, Fo, reads back through your own history, the way you’d flip back through a journal. If you told Fo last month you like aisle seats, it finds that note and uses it. Nothing about you is baked into an AI model. Fo only reads your profile. Your personal data is never used to train the AI models, and it never spills into another user’s experience.
2. What we collect, where it lives, how long
Where does my data live?
In a profile that belongs to you and is encrypted for you. Fo reads and writes your data when it works for you.
How long do you keep my data?
We store the data we collect for as long as you use the services, or as long as necessary to fulfill the purposes for which it was collected, or as long as necessary to pursue our business purposes.
How do I get everything deleted?
You may stop using the Services at any time, and you may cancel your account by selecting Profile > Settings > General > Delete account on the Site. Account deletion means we will delete all chat history, payment information, account profile, and connections.
3. Who can see your data
Can anyone at Wajo read my conversations, memory, or call recordings?
Wajo may share your data with the categories of third parties outlined in its Privacy Notice (primarily service providers).
Wajo engineers can’t access user data on their own. When a task fails, our default process strips out your personal data and provides relevant Wajo personnel with only the failure details. If Wajo personnel need full access to your personal data, access must be requested, approved and logged under our SOC 2 controls.
Does a human ever get involved in my tasks?
Rarely. Fo brings in a person only when the AI is stuck (e.g., a CAPTCHA it can’t pass, or someone on the phone who refuses to talk to an AI agent).
Who are these people and what do they see?
Trained executive assistants we hire. Each executive assistant is required to sign a confidentiality agreement and works inside Wajo’s platform. These executive assistants see only the minimal information required by a particular task.
4. Logins, connected accounts, payment methods
What happens when I connect Gmail or Calendar?
We ask for the narrowest permissions the task needs. Connecting does not copy your mail or events into Wajo. Fo reads that email live from Google and uses it for the task; nothing is downloaded directly into our database. OAuth tokens are encrypted in transit and at rest. Google Workspace data is never sold and never used to train AI models. You can disconnect any account at any time from your settings or from your Google account. After disconnecting, we do not have access to your email or calendar information that is hosted in your Google account.
How are my payment methods stored?
Your payment information is encrypted and stored in a vault. We never use it to make your purchases.
5. Payments and cards
When am I charged?
After the merchant charges Wajo, and only for the exact amount of that purchase. Some merchants take up to a few hours to settle; you are not charged until they do. Your money is never taken first.
This covers every purchase made through Wajo. If Fo pays with a card you’ve saved in your browser or at a merchant, that charge goes through the merchant, not us. We don’t see or manage it.
6. Calls Fo makes for you
What if the person doesn’t want to be recorded or called?
If they say so, Fo ends the call and Fo will not call that number again on your behalf.
7. Security architecture
Hosting and data residency
Hosting and data are distributed across regions.
Encryption and key management
User profiles are encrypted per user. OAuth tokens are encrypted in transit and at rest. TLS on all traffic.
Tenant isolation
Each AI agent run reads only the profile it belongs to. Agents cannot search another user’s history.