At ABS Studios, we strongly believe in complete data ownership. Since this Software is fully self-hosted on your own infrastructure (Next.js server and Supabase database), **you own 100% of your data**. ABS Studios does not host, access, store, or sell any of your contacts, message histories, conversations, or credentials.
To safeguard your WhatsApp Access Tokens and Google Gemini API keys, the Software utilizes state-of-the-art cryptography. All secret tokens saved via the Settings page are encrypted using **AES-256-GCM** authenticated encryption before storing them inside the database. These keys can only be decrypted by your private server runtime.
When the autonomous AI Assistant is enabled, the Software sends the last 10 messages of the active chat history along with your custom Training Topics to the **Google Gemini API** (via secure `generativelanguage.googleapis.com` endpoints) to generate natural responses. Google's developer API terms state that developer API data is secure and is not used to train Google's public foundation models.
All message interactions are handled directly between your self-hosted server and **Meta's WhatsApp Cloud API** servers. Media downloads, texts, reactions, and templates are transmitted over secure HTTPS channels directly using your configured access credentials.
The Software uses local storage and cookies strictly for handling session authentication (via Supabase Auth) and user appearance settings (like selected theme styles). No tracking or marketing cookies are installed.