Privacy Policy

Information We Collect

How We Use Your Information

We collect and use your personal information for legitimate business purposes, including:

• ✓Service Delivery: Providing WhatsApp Business API, messaging services, chatbot functionality, and platform features
• ✓Account Management: Creating and managing your account, processing transactions, billing, and subscription management
• ✓Platform Improvement: Analyzing usage patterns, improving features, developing new services, and optimizing performance
• ✓Communication: Sending service updates, security alerts, marketing messages (with consent), and customer support
• ✓Legal Compliance: Meeting legal obligations, preventing fraud, ensuring platform security, and protecting our rights

Data Sharing and Third Parties

We do not sell your personal information. We may share your data with:

All third-party services are governed by their own privacy policies. We ensure our partners maintain appropriate data protection standards through contractual agreements.

• •Service Providers: Cloud hosting (AWS, Google Cloud), payment processors (Razorpay, Stripe), analytics providers, and customer support tools
• •Meta/WhatsApp: Your data shared via WhatsApp Business API is subject to Meta's Cloud API data residence policies (data centers in North America and European Union)
• •Business Partners: Integration partners like Shopify, Facebook Leads, India Mart, and other platforms you connect
• •Legal Authorities: When required by law, court order, or to protect our legal rights and safety

Your Data Rights (GDPR Compliance)

Under GDPR and applicable data protection laws, you have the following rights:

• •Right to Access: Request a copy of the personal data we hold about you
• •Right to Rectification: Correct inaccurate or incomplete personal information
• •Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• •Right to Data Portability: Receive your data in a structured, machine-readable format
• •Right to Restrict Processing: Limit how we use your personal data
• •Right to Object: Opt-out of processing for marketing or legitimate interests
• •Right to Withdraw Consent: Revoke consent for data processing at any time

Data Security

We implement industry-standard security measures to protect your personal information:

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we continuously work to improve our security practices.

• •Encryption: TLS/SSL encryption for data in transit, AES-256 encryption for data at rest
• •Access Controls: Role-based access, multi-factor authentication, and secure authentication protocols
• •Infrastructure Security: Secure cloud hosting, regular security audits, and penetration testing
• •Monitoring: 24/7 security monitoring, intrusion detection, and incident response procedures

Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience:

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit Platform functionality.

• •Essential Cookies: Required for Platform functionality (login, security, session management)
• •Analytics Cookies: Understand usage patterns and improve services (Google Analytics)
• •Preference Cookies: Remember your settings and preferences
• •Marketing Cookies: Deliver relevant advertisements (with your consent)

Data Retention

We retain your personal information only as long as necessary to:

Upon account termination or deletion request, we will delete or anonymize your personal data within 90 days, except where retention is required by law.

• •Fulfill the purposes outlined in this Privacy Policy
• •Comply with legal, accounting, or regulatory requirements
• •Resolve disputes and enforce our agreements

International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including India, the United States, and the European Union. These countries may have different data protection laws than your jurisdiction.

For WhatsApp data processed through Meta's Cloud API, data resides in North America and European Union data centers. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and compliance with GDPR requirements for international transfers.

Children's Privacy

Chati is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@chati.ai, and we will delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated through email or a prominent notice on the Platform at least 30 days before taking effect.

We encourage you to review this page periodically. Continued use of the Platform after changes indicates your acceptance of the updated Privacy Policy.