Legal

Privacy Policy

Last updated: March 24, 2026. This policy explains what data we collect, how we use it, and your rights as a user of JohaHQ services.

Overview

JohaHQ ("we", "us", "our") operates the website johahq.com and its associated services, including the AI chat widget, WhatsApp bot, booking system, and AI UGC application forms. We are committed to protecting your personal information and being transparent about what we collect and why.

By using our website or services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our services.

We do not sell your personal data to third parties. Ever.

Data We Collect

Information you provide directly

When you interact with our services, you may provide us with:

  • Full name, email address, and phone number (via booking or contact forms)
  • Business type and the service you are interested in
  • Messages and descriptions you submit through our booking form
  • WhatsApp phone number and message content when you message our WhatsApp bot
  • Name, Instagram handle, and application details submitted via the AI UGC application form

Information collected automatically

When you visit johahq.com, we may automatically collect:

  • Browser type and version, device type, and operating system
  • IP address and approximate geographic location
  • Pages visited, time spent, and referring URL
  • Interaction data via the Meta (Facebook) Pixel

AI chat conversations

Conversations you have with our AI assistant (Joha) on the website are processed in real time by Anthropic's Claude API. Chat history is stored only in your browser session and is not persisted on our servers once you close the page.

WhatsApp conversations are logged to our secure server to enable conversation memory and admin review. Logs include your phone number, message timestamps, and message content.

How We Use Your Data

We use the information we collect to:

  • Respond to booking requests and schedule strategy calls
  • Send you a confirmation email after submitting a form
  • Notify our internal team of new leads and applications
  • Power the AI chat and WhatsApp bot (processing messages through Claude)
  • Review and respond to WhatsApp conversations from the admin dashboard
  • Improve our services and understand how users interact with the site
  • Comply with legal obligations

We do not use your data for automated decision-making that has legal or significant effects on you, and we do not build profiles for advertising purposes using your personal data.

Third-Party Services

We use the following third-party services that may process your data on our behalf:

Anthropic (Claude AI)

All AI responses on our website and WhatsApp are powered by Anthropic's Claude API. Messages you send to Joha are transmitted to Anthropic's servers for processing. Anthropic's use of your data is governed by their Privacy Policy.

Meta (Facebook Pixel & WhatsApp Business API)

We use the Meta Pixel on our website to measure the effectiveness of our advertising. This may collect browsing behaviour data. We also use the WhatsApp Business API (via Meta) to operate our WhatsApp bot. Meta's use of data is governed by Meta's Data Policy.

Resend

We use Resend to send transactional emails — including booking confirmation emails to you and lead notification emails to our team. Your name and email address are transmitted to Resend to deliver these emails. Resend's practices are governed by their Privacy Policy.

Google (Sheets & Fonts)

Booking form submissions may be logged to a private Google Sheet for internal tracking. We also load fonts from Google Fonts, which may collect standard web request data per Google's Privacy Policy.

Hostinger VPS

Our application server runs on a Hostinger VPS (Virtual Private Server). Form submissions, WhatsApp conversation logs, and application data are stored as JSON files on this server. Hostinger's infrastructure practices are governed by Hostinger's Privacy Policy.

Data Storage & Retention

Your data is stored on our secure VPS server. We retain personal data only as long as necessary for the purposes described in this policy:

  • Booking and contact form submissions are retained indefinitely for business records unless you request deletion
  • UGC application data is retained for the duration of our review process and ongoing communications
  • WhatsApp conversation logs are retained to enable conversation continuity and admin oversight
  • Website chat history is not stored on our server — it exists only in your browser session

We implement reasonable technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. However, no internet transmission is 100% secure.

Cookies & Tracking

Our website uses cookies and similar tracking technologies:

  • Meta Pixel: Tracks page views and events for advertising measurement purposes. You can opt out via Facebook Ad Preferences.
  • Google Fonts: Fonts are loaded from Google's CDN, which may set cookies or log your IP address as part of a standard web request.
  • Session storage: We use browser session storage to maintain your chat history during a single visit. This is not a cookie and is cleared when you close the tab.

We do not use cookies for persistent user tracking or profiling beyond what is described above. You can control cookies via your browser settings.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Ask us to correct inaccurate or incomplete data
  • Deletion: Request that we delete your personal data from our systems
  • Objection: Object to how we use your data in certain circumstances
  • Portability: Request your data in a portable, machine-readable format

To exercise any of these rights, contact us at hello@johahq.com. We will respond within 30 days. We may need to verify your identity before processing your request.

If you sent us a WhatsApp message and would like that conversation deleted from our logs, email us from the same number's associated account or include your WhatsApp number in your request.

Children's Privacy

Our services are intended for businesses and professionals. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has submitted personal data to us, please contact us immediately and we will delete it.

Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

Continued use of our services after changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:

We take privacy seriously and will do our best to address your concern promptly and fairly.