ChatPat Business Inbox — Privacy Policy

1. Data We Collect

• Account: Name, email address, avatar URL (login credentials).
• Business-provided CRM data: Contact names, phone numbers in E.164 format, emails, company names, tags, notes, opt-in source, and timestamp.
• Messages: Message text, template names/variables, media URLs/captions, delivery/read statuses, and provider IDs (wamid).
• Configuration: WhatsApp Business Account (WABA) ID, phone number ID, display phone number, API version, webhook verify token, and your Supabase project URL.
• Diagnostics: Crash logs, sync status, and latency. No advertising tracking SDKs are used.

2. Purpose of Data Processing

We process data strictly to provide core application functionality: shared team inbox, broadcast campaigns with automatic opt-out suppression, WhatsApp template management, pipeline deal tracking, inbound automations, audit logging, and realtime database synchronization.

3. Where Data is Stored

Data resides in on-device encrypted preferences (AES-256) and Room DB on mobile, in your own dedicated Supabase PostgreSQL database (region chosen by you), and over the Meta Graph API (graph.facebook.com) for WhatsApp message delivery. We never sell, rent, or monetize your data.

4. Third-Party Sharing

Data is shared only with the service providers needed to run the app. All network traffic is strictly enforced over TLS (usesCleartextTraffic=false):

• Meta Cloud API: to send and receive WhatsApp messages you initiate.
• Supabase: as your isolated database backend.
• Google Firebase: Firebase Authentication and Google Sign-In for login (name, email, avatar), Cloud Firestore for your account directory record (user profile, workspace link, licence), and Firebase Crashlytics for crash diagnostics.
• AI provider (optional, off by default): if the business enables the AI assistant, the text of the customer's message and matching excerpts from the business knowledge base are sent to the AI provider the business selects and configures with its own API key — OpenAI, Anthropic (Claude), Google Gemini, or an OpenAI-compatible endpoint (for example OpenRouter, DeepSeek or Groq). While the assistant is disabled, customer messages are not sent to any AI provider.

5. Opt-In & Opt-Out Safeguards

WhatsApp messaging requires verified opt-in. Customers texting only STOP, UNSUBSCRIBE, OPT OUT, OPTOUT, CANCEL, END or QUIT are automatically marked opted-out, suppressed from future broadcasts, and active workflow automations are cancelled immediately. Opt-in proof and timestamp are stored for compliance and dispute resolution.

6. Retention & Deletion

Message history is retained for a configurable period (default: 90 days, range 0–3650, where 0 means keep forever), enforced daily by an automated background purge worker. CRM contacts and account data are retained until you delete them.

In the app: Settings → Policy & Logs → Delete Account & Wipe All Data deletes the local Room database and your Supabase rows, removes your auth account and directory documents, and signs you out.

You can permanently delete your account and all associated data at any time via the self-service portal at /delete-account or by emailing privacy@chatpat.io for export or erasure, which we complete within 30 days.

7. Security Standards

We implement end-to-end security measures: TLS in transit, database Row Level Security (RLS) denying unauthorized access by default, HMAC-SHA256 signature verification on all incoming webhooks, write-only token storage with non-selectable access keys, and strict Content Security Policies.

8. Contact & Inquiries

For privacy questions, data export, or erasure requests, contact our privacy desk at privacy@chatpat.io or our support team at support@chatpat.io.