Privacy Policy

Last Updated: Dec 24 2025

At Chati , we are committed to protecting your privacy and ensuring the security of your data. This Privacy Policy explains how we collect, use, process, store, and delete information when you use our services, including our Shopify public application.

Who We Are

Chati AI is a product of Crunchy Media Private Limited (“Company”, “we”, “our”, “us”), providing WhatsApp Business API, Instagram messaging, and multi-channel customer communication solutions.

Website: https://chati.ai
Registered Address: Bhubaneswar, Odisha, India

Chati AI is an official WhatsApp Business Solution Provider and a Shopify public app.

Scope of This Policy

This Privacy Policy applies to:

The Chati AI website
The Chati AI Shopify application
WhatsApp and Instagram messaging services
All integrations connected to Chati AI

By installing or using Chati AI, you agree to this Privacy Policy.

Information We Collect

1. Shopify Store Data

When you install the Chati AI Shopify app, we collect:

Store name
Store domain
Store email
Currency, timezone
Shopify store ID

2. Order, Checkout & Fulfillment Data

Collected via Shopify APIs and webhooks:

Orders and order updates
Payment and refund status
Checkout creation, updates, deletion
Fulfillment and fulfillment events

3. Customer Data

Only when required for messaging or automation:

Customer name
Phone number
Email address
Order-related metadata

4. Communication Data

WhatsApp and Instagram message metadata
Chat logs and conversation history
Automation and chatbot interactions

5. Account & Business Data

Name, email, phone number
Company name and business details
Subscription and billing details
(Payments are processed securely by third-party processors such as Stripe or Razorpay)

6. Non-Personal & Technical Data

IP address
Browser & device information
Usage logs and analytics
Cookies and session data

Personal Information

"Personal information" refers to any data that can identify you as an individual. We collect:

•Account Information: Name, email address, phone number, company name, business details
•Communication Data: Messages, chat logs, customer interactions through the Platform
•Payment Information: Billing address, payment method details (processed securely by third-party payment processors)
•Customer Data: Information about your customers that you upload or share through the Platform

Non-Personal Information

We also collect non-personal information that does not directly identify you:

•Usage Data: IP address, browser type, device information, pages visited, time spent on Platform
•Cookies and Tracking: Session cookies, analytics cookies, preference cookies
•Location Data: General location through IP address, Wi-Fi, or GPS (if permitted)

Shopify Webhooks We Use

Chati AI uses Shopify webhooks to provide real-time automation and compliance.

Order Webhooks

orders/create
orders/paid
orders/cancelled
orders/update
refunds/create

Fulfillment Webhooks

fulfillments/create
fulfillments/update
fulfillment_events/create
fulfillment_events/delete

Checkout Webhooks

checkouts/create
checkouts/update
checkouts/delete

Mandatory Compliance Webhooks

app/uninstalled
customers/data_request
customers/redact
shop/redact

These webhooks are used only to operate the app and meet Shopify’s legal requirements.

How We Use Your Information

We collect and use your personal information for legitimate business purposes, including:

✓Service Delivery: Providing WhatsApp Business API, messaging services, chatbot functionality, and platform features
✓Account Management: Creating and managing your account, processing transactions, billing, and subscription management
✓Platform Improvement: Analyzing usage patterns, improving features, developing new services, and optimizing performance
✓Communication: Sending service updates, security alerts, marketing messages (with consent), and customer support
✓Legal Compliance: Meeting legal obligations, preventing fraud, ensuring platform security, and protecting our rights

Legal Basis: We process your data based on contract performance, legitimate business interests, legal obligations, and your consent where required by law.

How We Use Your Data

We use collected data to:

Send WhatsApp and Instagram notifications
Automate customer communication
Recover abandoned carts
Provide order, checkout, and fulfillment updates
Improve product performance and reliability
Provide customer support
Meet legal and regulatory obligations

•Account information
•Usage data

We do not sell personal or store data.

Data Sharing and Third Parties

We do not sell your personal information. We may share your data with:

All third-party services are governed by their own privacy policies. We ensure our partners maintain appropriate data protection standards through contractual agreements.

•Service Providers: Cloud hosting (AWS, Google Cloud), payment processors (Razorpay, Stripe), analytics providers, and customer support tools
•Meta/WhatsApp: Your data shared via WhatsApp Business API is subject to Meta's Cloud API data residence policies (data centers in North America and European Union)
•Business Partners: Integration partners like Shopify, Facebook Leads, India Mart, and other platforms you connect
•Legal Authorities: When required by law, court order, or to protect our legal rights and safety

Your Data Rights (GDPR Compliance)

Under GDPR and applicable data protection laws, you have the following rights:

•Right to Access: Request a copy of the personal data we hold about you
•Right to Rectification: Correct inaccurate or incomplete personal information
•Right to Erasure: Request deletion of your personal data ("right to be forgotten")
•Right to Data Portability: Receive your data in a structured, machine-readable format
•Right to Restrict Processing: Limit how we use your personal data
•Right to Object: Opt-out of processing for marketing or legitimate interests
•Right to Withdraw Consent: Revoke consent for data processing at any time

To exercise any of these rights, please contact us at privacy@chati.ai. We will respond to your request within 30 days.

Data Security

We implement industry-standard security measures to protect your personal information:

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we continuously work to improve our security practices.

•Encryption: TLS/SSL encryption for data in transit, AES-256 encryption for data at rest
•Access Controls: Role-based access, multi-factor authentication, and secure authentication protocols
•Infrastructure Security: Secure cloud hosting, regular security audits, and penetration testing
•Monitoring: 24/7 security monitoring, intrusion detection, and incident response procedures

Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience:

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit Platform functionality.

•Essential Cookies: Required for Platform functionality (login, security, session management)
•Analytics Cookies: Understand usage patterns and improve services (Google Analytics)
•Preference Cookies: Remember your settings and preferences
•Marketing Cookies: Deliver relevant advertisements (with your consent)

Data Retention

We retain your personal information only as long as necessary to:

Upon account termination or deletion request, we will delete or anonymize your personal data within 90 days, except where retention is required by law.

•Fulfill the purposes outlined in this Privacy Policy
•Comply with legal, accounting, or regulatory requirements
•Resolve disputes and enforce our agreements

International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including India, the United States, and the European Union. These countries may have different data protection laws than your jurisdiction.

For WhatsApp data processed through Meta's Cloud API, data resides in North America and European Union data centers. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and compliance with GDPR requirements for international transfers.

Children's Privacy

Chati is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@chati.ai, and we will delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated through email or a prominent notice on the Platform at least 30 days before taking effect.

We encourage you to review this page periodically. Continued use of the Platform after changes indicates your acceptance of the updated Privacy Policy.

Questions About Your Privacy?

If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact our Data Protection team:

Data Protection Officer: privacy@chati.ai

General Inquiries: hello@chati.ai

Address: Crunchy Media Private Limited, Bhubaneswar, Odisha, India

Related Policies: Terms of Use • Refund Policy