Privacy policy

Prat is a workspace for your WhatsApp conversations at prat.chat. You connect your WhatsApp phone, read and reply from Prat, keep notes, and can let AI apps such as ChatGPT and Claude work with your conversations through Prat.

Prat is a product of [Lutz — registered legal name, registration number and address], which is responsible for your data. In this policy, “we” means that company, and “you” means the person with the Prat account. Accounts are by invitation only for now.

Your account

• Your name and email address, and whether you’ve verified the email.
• Your password, only as a one-way Argon2id hash. We can’t read it.
• If you sign in with Google: your Google account ID, name, email address and the link to your profile picture. Prat asks Google only for your basic profile and email, and stores the tokens Google returns encrypted.
• For each device you sign in on: its IP address, its browser details, and when the session started and ends. You can see these in Settings → Active sessions.
• Counters that limit repeated sign-in attempts, kept by IP address or by a keyed hash of the email address.

Your WhatsApp phones

When you connect a phone, Prat stores:

• The phone’s name in Prat, its status, when it was first linked, and the credentials Prat uses to reach it, encrypted.
• Your chats: each chat’s WhatsApp address, which usually includes the phone number, the name WhatsApp shows for it, and any name you give it. For groups, also the group’s name and description, and each member’s WhatsApp address, name and admin status.
• The messages in those chats, sent and received, including the history WhatsApp provides when you connect or sync: text, captions, the sender’s WhatsApp name, times, delivery and read receipts, and reactions.
• Photos, videos, voice messages, audio, stickers and documents in those messages, with their names, types and sizes. Prat keeps a copy of files sent after you connect, and of older ones once you open them or scroll to them. It may also keep a version that plays in your browser and a preview image.
• What you’ve read, replies you haven’t sent yet, files you’re preparing to send, and the outcome of each message Prat sends for you.
• Processing records: updates from WhatsApp, and messages waiting to be sent, are saved as work items before Prat applies them. A failed item keeps its full error, which can include message text, so the problem can be found and the item retried.

Prat doesn’t copy your phone’s contact list or anyone’s profile picture.

Voice message transcripts

Prat sends voice messages to OpenAI to transcribe them, both the ones you receive and the ones you send, so you and the AI apps you connect can read what was said. It transcribes voice messages sent or received after you first connect your phone; older history isn’t transcribed, and neither is audio sent as a file, such as music.

Each transcript is kept with its voice message, with the language OpenAI heard, and is deleted with it. You can turn transcription off in Settings → Voice messages. New voice messages are then not sent to OpenAI, and transcripts already made stay.

Notes and suggested messages

• Notes that you or a connected AI app write about a conversation or about you, with the name of the app that wrote each one.
• Messages a connected AI app suggests, with its short reason. A suggestion that’s sent stays as the record of which app suggested it and who sent it.

Connected AI apps

• Which apps you allowed, what each may do (read, keep notes and suggestions, send), and when you allowed it.
• The tokens each app uses to reach Prat. Access tokens last 15 minutes, and refresh tokens expire 30 days after their last use.
• Counters that limit how often an app can make requests, send or check numbers.

AI connection (optional)

If you connect an OpenAI Codex account in Settings → AI connection, Prat stores the account’s identifiers and email address, its credentials encrypted, the models it offers, and your choice. Prat doesn’t send your conversations to it.

Logs

Prat’s servers keep operational logs to run and fix the service: errors, sign-in and connection events, and one line for each request an AI app makes, with the tool, the outcome, your account ID and the app. Logs are written to leave out message text, search terms, tokens and email addresses. While we investigate a problem, more detailed logging can include error messages that contain private text.

• To run Prat for you: show and search your conversations, keep your files, send the messages you write or approve, and keep your phone connected.
• To keep your account secure: verify your email, reset your password, refuse passwords known from data breaches, limit repeated attempts, and show you where you’re signed in.
• To let the AI apps you connect do what you allowed, and nothing more.
• To transcribe voice messages, unless you turn that off.
• To send you account emails: email verification, password reset, and notices when your password changes or a device is signed out.
• To find and fix problems.

Prat shows no ads and runs no analytics or tracking scripts. Apart from voice messages, which OpenAI transcribes unless you turn that off, Prat sends your conversations to an AI service only when you connect an AI app yourself.

We run most of Prat ourselves, on [hosting provider] in [country or region]:

• PostgreSQL, the database that holds everything above.
• S3-compatible storage, private storage for files from your messages.
• Evolution, open-source software that links Prat to your WhatsApp as a linked device, the way WhatsApp Web does. It keeps its own copy of your phone’s messages so Prat can import history.
• Trigger.dev, which runs background work such as importing history, saving files and sending messages.
• Centrifugo, which tells your open Prat tabs to refresh. Its notices say only that something changed, never what it says.
• Plunk, which sends account emails. It receives your email address and the email’s content.
• Infisical, which keeps Prat’s own keys and passwords for these services. It doesn’t hold your data.

Other companies involved:

• WhatsApp (Meta) carries your messages. Your WhatsApp account stays under WhatsApp’s own terms and privacy policy.
• Google, if you sign in with Google.
• Have I Been Pwned: when you choose a password, Prat sends the first five characters of the password’s SHA-1 hash to its Pwned Passwords service to check for known breaches. Your password itself never leaves Prat.
• The AI apps you connect, today ChatGPT (OpenAI) and Claude (Anthropic). Whatever an app reads through Prat, such as messages, names and notes, is sent to that app’s provider and handled under your account with them. Prat reads each app’s public sign-in details from chatgpt.com and claude.ai.
• OpenAI transcribes voice messages, unless you turn that off in Settings → Voice messages. Prat sends it each voice message’s audio, through Prat’s own OpenAI account, and keeps the text it returns. OpenAI keeps most API requests for up to 30 days to detect abuse, but its documentation lists transcription requests as not used for training and not retained for abuse monitoring. If you connect a Codex account, Prat also signs in through OpenAI and reads the account’s list of models, without sending any conversation content.
• Meta’s WhatsApp Business Platform, planned: connecting a WhatsApp Business app number through Meta isn’t available yet. When it is, Meta will deliver those numbers’ messages and history to Prat, and you’ll sign up in a window run by Meta. We’ll update this policy before it launches.

• Your account and conversations, with their files and voice message transcripts, stay until you delete them or ask us to delete your account. Pausing or removing a phone keeps its conversations, messages and files.
• Sessions end about 7 days after you last use them, or when you sign out.
• Email links for verifying your email or resetting your password expire after an hour.
• Processing records are deleted 24 hours after they complete. Two kinds stay longer: a message whose delivery is unknown, so you can check it, and history import progress, so a later sync can continue. Failed records stay until they’re retried.
• Raw copies of what WhatsApp sends us are kept for up to 7 days after we process them, then deleted. They can include a message its sender later deleted for everyone, which Prat itself no longer shows or keeps.
• Unfinished uploads and temporary files are deleted after 24 hours.
• AI app tokens expire as described above, and request counters are cleared after an hour.
• Logs: [how long server logs are kept].
• Backups: [whether, and how long, database and storage backups are kept].

You can delete some data yourself in Prat, and ask us to delete your whole account.

In Prat

• Notes: delete any note in a conversation’s Details, or in Home → About you.
• Suggested messages: choose Discard.
• AI apps: Settings → Connected AI apps → Disconnect removes the app’s access at once. What the app already read stays with its provider; delete it there, for example by deleting the chat.
• AI connection: Settings → AI connection → Disconnect deletes the saved credentials.
• Google sign-in: Settings → Linked accounts → Unlink.
• Devices: sign out a device in Settings → Active sessions.
• A phone: Settings → Connections → Remove stops Prat receiving and sending for it, deletes its credentials, and removes it from our Evolution server. Its conversations, messages and files stay in your account.

Prat can’t yet delete single conversations, messages or transcripts, or your whole account, from inside the app.

Delete your account

Email [privacy contact email] from the address you use for Prat and ask us to delete your account. We’ll confirm the request came from you, remove each phone you connected, and then delete your account with everything stored for it: sign-in methods and sessions, conversations, messages, files and transcripts, notes and suggestions, AI app access, and your AI connection. We’ll tell you when it’s done, within [number of days].

Files are removed from storage by a background cleanup that runs every minute. Copies can remain in backups until [backup retention] and in server logs until [log retention]. Afterwards, check that Prat no longer appears under Linked devices in WhatsApp on your phone.

When someone connects their WhatsApp to Prat, Prat stores the chats on their phone, including the messages, WhatsApp names and numbers of the people they talk to and of their groups’ members. Voice messages you send them are transcribed by OpenAI unless they turn that off. They choose to connect, and they can connect AI apps that read those chats. If you’ve talked to a Prat user and want to ask about your data, email us at [privacy contact email].

• Every request checks that you’re signed in and that what you ask for belongs to your account. Files from your messages are served only to you.
• Credentials for your WhatsApp connection, Google tokens and Codex credentials are stored encrypted. Passwords are stored only as Argon2id hashes.
• The sign-in cookie can’t be read by scripts and, on prat.chat, is sent only over HTTPS.
• AI apps get only the access you allowed. Disconnecting one stops it at once, and changing or resetting your password disconnects them all.
• Prat’s administrator role doesn’t open other people’s conversations in the app.

Your messages aren’t end-to-end encrypted inside Prat. WhatsApp’s end-to-end encryption covers a message until it reaches your linked device, which here is Prat’s server, and Prat stores it so it can show and search it. The people who run Prat’s servers could technically read it. [When, if ever, we access message content]

No system is perfectly secure.

Prat uses only the cookies it needs to work:

• A session cookie that keeps you signed in.
• A short-lived cookie that protects Google sign-in from forgery while you sign in.
• A cookie that remembers whether the sidebar is open, for 7 days.

While you write a reply, Prat also keeps the unsent text in your browser tab’s session storage, and clears it when you sign out. Prat uses no analytics, advertising or third-party cookies.

• See your data. Most of it is in Prat: your conversations, notes, connected apps and devices. Ask us for a copy of anything else we hold about you.
• Correct it. Rename conversations and edit notes in Prat. Ask us to correct your name or email address.
• Delete it. See Data deletion.
• Withdraw permission. Disconnect an AI app or your AI connection, turn off voice message transcripts, or remove a phone, at any time.

To make a request, email [privacy contact email]. We’ll answer within [response time]. [Rights under the governing law, and where to complain, if you name them]

When we change this policy, we’ll publish the new version here and update the date at the top. [How you’ll hear about important changes, for example by email first]

[Lutz — registered legal name]
[registered address]
Email: [privacy contact email]

This policy is governed by the laws of [governing law and jurisdiction].