Privacy policy

1. Information we collect

Waitlist and website

• Email address, the industry you select, and the channels you want answered (WhatsApp, text, or email).
• Name, if you provide it.
• We send a confirmation email to the address you give us. We do not collect payment card numbers through the waitlist.
• Basic technical data our hosting provider records when you load the site (for example IP address, browser type and request logs).

Business clients

• Contact details of the business owner and staff who use Chattif (name, email, phone number).
• The content the business gives us to teach Chattif (FAQs, prices, policies, documents, rules about what Chattif must never say or promise).
• When a business connects WhatsApp: data received from Meta through WhatsApp Embedded Signup, described in section 2.

End customers (people who message a business)

• Your phone number (for WhatsApp and SMS) or email address (for email).
• Your name or profile name, if it is provided by you or by the messaging channel.
• The content of messages you send and the replies sent to you, including attachments you send, and the time and channel of each message.
• Details the business has asked Chattif to collect in the conversation (for example an address or a preferred appointment time).

We redact Social Security numbers and payment card numbers before messages are logged. Please do not send sensitive information such as card numbers, passwords or health details in a chat unless the business has specifically asked for it.

2. WhatsApp and Meta Platform Data

Chattif uses the WhatsApp Business Platform (Cloud API) provided by Meta. When a business connects its WhatsApp account to Chattif through Meta's Embedded Signup flow, Meta gives Chattif access to that business's WhatsApp Business Account. Through that access we receive and handle:

• The business's WhatsApp Business Account ID, business phone number(s) and phone number ID(s), display name, business profile, message templates and their approval status, and account status information.
• Messages that end customers send to the business's WhatsApp number, including the sender's phone number and WhatsApp profile name, message text and media, and delivery/read status of replies.
• An access token that lets Chattif act for the business within the permissions the business granted.

We use this data only to provide Chattif to the business that connected the account: receiving customer messages, generating and sending replies, showing the conversation to the business, and managing the business's WhatsApp phone numbers, templates and settings at the business's request.

We do not:

• sell Meta Platform Data or any personal information;
• use WhatsApp data for advertising, or share it with data brokers or advertising networks;
• use one business's customer data to serve another business;
• use WhatsApp data to build profiles of people beyond what is needed to carry on the conversation with that business.

Business messages are sent only in reply to a customer who messaged the business, or with the business's approval (for example an approved follow-up or reminder template). Customers can ask for a human at any time.

We follow the Meta Platform Terms, Meta Developer Policies and the WhatsApp Business terms that apply to us. If Meta or a business disconnects Chattif, we stop accessing that WhatsApp account.

3. How we use information

• To answer end customers on the business's behalf, using the information the business provided.
• To show businesses their conversations, hand conversations to a person, and require approval for sensitive replies when the business has turned that on.
• To set up and support business clients, and to contact business owners about their account.
• To send waitlist confirmation emails and early-access updates you asked for.
• To keep the service secure, prevent abuse, fix problems and keep records required by law.

We do not use end-customer conversations to advertise to those customers.

4. AI processing

To write replies, Chattif sends the relevant part of the conversation and the business's own information to an AI model provider (currently OpenAI) through its API. The provider processes that data to generate the reply and returns it to us. AI providers we use are contractually restricted from using your data to train their models where offered.

5. Who processes data for us

We use these service providers to run Chattif. Each receives only the data it needs to perform its service for us.

When a business uses text messaging, a messaging provider sends and receives those messages and processes the phone numbers and message content needed to deliver them. Inbound customer email is received by an email provider, which may be Elastic Email or a separate provider, and that provider processes the addresses and content needed to receive the mail.

We may also disclose information if required by law, to protect the rights and safety of people or the service, or as part of a merger or sale of the business (in which case this policy continues to apply to existing data).

6. How long we keep information

• Conversations and end-customer data: kept while the business is a Chattif client so the business can see its conversation history, then deleted within 30 days after the business closes its account or disconnects, unless the business asks us to delete sooner or the law requires us to keep it longer. A business may set a shorter retention period.
• WhatsApp access tokens and account connection data: deleted when the business disconnects Chattif or closes its account.
• Waitlist signups: kept until you unsubscribe or ask us to delete them, or until 24 months after signup if you never become a client.
• Setup requests that never go live: kept while we are setting up the business and for a reasonable period after; deleted on request.
• Backups: deleted data may remain in encrypted backups for up to 30 days before it is overwritten.

7. Security

We use encrypted connections (HTTPS/TLS), access controls limited to people who need access to run the service, and providers that encrypt stored data. No system is perfectly secure; if we learn of a breach affecting your information, we will notify affected businesses and people as required by law.

8. Your choices and rights

You can ask us to:

• tell you what personal information we hold about you;
• correct it;
• delete it (see our Data Deletion Instructions);
• stop sending you waitlist or marketing email (use the unsubscribe link or email us).

End customers can also stop a conversation at any time, ask for a human, or block the business on WhatsApp.

Depending on where you live (for example the EU/UK under GDPR, or California under the CCPA/CPRA), you may have additional rights, including the right to complain to your local data protection authority. We will honor valid requests within the time the law requires, and in any case aim to respond within 30 days. We may need to verify your identity, and where we process your data on behalf of a business, we may forward your request to that business.

We do not sell or “share” personal information for cross-context behavioral advertising.

9. Children

Chattif is a business tool and is not directed to children under 13 (or under 16 where local law sets a higher age). We do not knowingly collect their information as a client or waitlist user.

10. Changes

If we change this policy we will update the date at the top. If a change materially affects how we use existing data, we will notify business clients by email before it takes effect.

11. Contact

Terms · Data deletion · Contact