Privacy Policy

1. Overview

followup (“followup”, “we”, “us”) is operated by LightningAI. We help appointment-based businesses send scheduled WhatsApp reminders to their past customers. This policy describes how we handle two kinds of data: information about you (our customer) and information about the people you message (your customers).

For your account data we act as the data controller. For the customer contact lists you upload, you are the controller and we act as your data processor — we process that data only on your instructions, to deliver the service.

2. What we collect

Account information

• Your name, email address, and business details.
• Authentication data needed to sign you in securely.
• Billing information and the message-sending settings you configure.

Customer contact data you upload

• Customer names, phone numbers, last-visit dates, and any car or service details you import to schedule reminders.
• Reminder status and opt-out state (for example, when someone replies STOP).

Usage data

• Basic technical logs (such as access times and error events) used to operate, secure, and improve the service.

3. How we use data

We use data to:

• Provide the service — scheduling and sending your reminders.
• Authenticate users and keep accounts secure.
• Process payments and manage subscriptions.
• Provide support and respond to your requests.
• Maintain, troubleshoot, and improve the service.

We never sell, rent, or share your customer lists, and we do not use your data to train machine-learning models.

4. Messaging and WhatsApp

Reminders are delivered through the WhatsApp Business Platform, operated by Meta. To send a message, the recipient’s phone number and your message content are shared with WhatsApp for delivery, governed by Meta’s own privacy terms. When a recipient replies STOP we record an opt-out and never message them again.

5. Where data is stored

Customer data is stored in a Postgres database hosted in the European Union. We use reputable infrastructure providers and apply encryption in transit and at rest, access controls, and the principle of least privilege to protect it.

6. Retention

We keep account and customer data for as long as your account is active. You can export everything to CSV at any time and delete your business with a single confirmation, which removes the associated customer data. We may retain limited records where required for legal, accounting, or security purposes.

7. Your rights

Depending on your location, you (and your customers) may have rights to access, correct, export, or delete personal data, and to object to or restrict certain processing. For account data, contact us directly. For a request about a person in a list you uploaded, contact the business that holds the list; as processor we will assist that business in responding.

8. Sub-processors

We rely on a small set of vendors to run the service — including cloud database and hosting providers and the WhatsApp Business Platform for message delivery. Each is bound to handle data only as needed to provide their service.

9. Cookies

We use only the cookies and local storage strictly necessary to keep you signed in and to operate the dashboard. We do not use advertising or cross-site tracking cookies.

10. Changes to this policy

We may update this policy as the service evolves. Material changes will be announced in-app or by email, and the “last updated” date above will change.

11. Contact

For any privacy question or request, email support@garageplus.co.il or visit our contact page.