Privacy Policy

Mason (by Challengees comm. v) · Effective Date: March 2026

1. Introduction & AI Transparency

Welcome to Mason, an AI assistant by Challengees. This Privacy Policy explains how we collect, use, and protect your data when you interact with our service via WhatsApp.

By using Mason, you acknowledge that you are interacting with an Artificial Intelligence (AI) system. Mason is designed to provide comprehensive administrative support to contractors, including task management, reminders, invoicing assistance, and client communication. It is a dedicated business tool and is not a general-purpose conversational agent.

2. Who We Are (Data Controller)

The data controller responsible for your personal data is:

  • Company: Challengees comm. v
  • VAT Number: BE0695.626.491
  • Location: Belgium

3. What Data We Collect

To allow Mason to facilitate your administrative tasks over WhatsApp, we process the following information:

  • Identity & Contact Data: Your WhatsApp phone number and profile name.
  • Business & Task Data: The information you provide regarding your schedule, to-do lists, client details, and invoice calculations.
  • Communication Data: The exact text, documents, and media of your messages, alongside metadata (such as timestamps).

We process your personal data on the basis of the performance of a contract (GDPR Article 6(1)(b)), as applicable in Belgium under the Act of 30 July 2018. By using Mason, you enter into a service relationship with Challengees comm. v and the processing is necessary to deliver that service.

4. How We Process Your Data & Our Technology

Your data is processed strictly to perform the administrative services you request from Mason.

  • The "Brain" (LLM): Mason utilizes Google Gemini for natural language processing to understand your requests and generate helpful responses.
  • Hosting Infrastructure: Our application logic and secure environment are hosted on Cloudflare. Cloudflare serves only as our secure hosting layer; we do not utilize Cloudflare's native AI models.
  • Zero Model Training: We have configured our enterprise APIs to ensure that your business data, chat history, and files are never used by Google or Cloudflare to train, fine-tune, or improve their underlying AI models.
  • Opt-in & Opt-out: Mason only contacts you via WhatsApp after you have actively given consent by starting a conversation yourself or explicitly signing up. You can opt out at any time by replying STOP in the WhatsApp conversation or by sending a request to help@meetmason.ai. After opting out, Mason will immediately stop initiating new messages.

5. Data Retention & Automated Deletion

We practice strict data minimization.

  • All chat data, session histories, and temporary files processed by Mason are automatically and permanently deleted from our active databases after a maximum period of 90 days.
  • Mason is also designed to trigger earlier, automatic deletions for specific session-based tasks once they are marked as completed.

6. Human Oversight (Human-in-the-Loop)

While Mason is an automated AI service, human oversight is an integral part of our safety architecture. A human agent from Challengees comm. v will be automatically notified to take over the WhatsApp conversation in specific scenarios, including:

  • When you explicitly request to speak with a human.
  • When executing sensitive, account-level actions (such as a request for permanent account deletion).

7. Third-Party Sharing

Challengees comm. v does not sell, rent, or trade your data to third parties. Aside from the necessary, encrypted transmission of data to our infrastructure partners (Google Gemini and Cloudflare) for real-time processing, your information remains entirely within our ecosystem.

8. Your Privacy Rights

As a user based in the European Union, you are protected by the General Data Protection Regulation (GDPR) and the EU AI Act. You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request corrections to any inaccurate data.
  • Erasure (Right to be Forgotten): Request the immediate deletion of your chat history and account data before the standard 90-day window.
  • Human Intervention: Request that a human reviews specific actions taken during your interaction with Mason.

You can submit your request via help@meetmason.ai. We will process each request within 30 days. For complex or multiple requests, this may be extended to 60 days, of which we will notify you in a timely manner.

If you believe that your personal data is not being processed correctly, you have the right to file a complaint with the Belgian Data Protection Authority (GBA): Drukpersstraat 35, 1000 Brussels — www.gegevensbeschermingsautoriteit.be

9. Minors

Mason is intended exclusively for use by individuals aged 16 years or older. We do not target minors and do not knowingly collect data from individuals under the age of 16. If you are under 16 years of age, you may not use Mason without the consent of a parent or guardian.

10. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or need to escalate an issue to a human agent, you can request human assistance directly in your WhatsApp chat with Mason or contact us at:

Email: help@meetmason.ai