ChatPat Business Inbox — Privacy Policy

Effective: 2026-09-11  •  Contact: privacy@chatpat.io / support@chatpat.io

ChatPat Business Inbox ("ChatPat") is an independent business CRM built on the official WhatsApp Business Cloud API. ChatPat is not affiliated with, endorsed by, or sponsored by WhatsApp or Meta Platforms, Inc. WhatsApp is a trademark of Meta.

1. Data we collect

• Account: name, email, avatar (login).
• Business-provided CRM data: contact names, phone numbers (E.164), emails, company, tags, notes, opt-in source/timestamp.
• Messages: message text, template names/variables, media URLs/captions, delivery/read statuses, provider IDs (wamid).
• Config: WABA ID, phone number ID, display number, API version, webhook verify token, Supabase project URL.
• Diagnostics: crash logs, sync status, latency (no ad tracking).

2. Why

App functionality only: shared inbox, broadcasts with opt-out suppression, templates, pipeline, automations, audit log, realtime sync.

3. Where stored

On-device encrypted prefs (AES256) + Room DB (backup excluded), and your own Supabase Postgres (region per your project) + Meta Graph API (graph.facebook.com) for delivery. No sale of data. No ad SDKs.

4. Sharing

Only with the service providers needed to run the app, all over TLS (usesCleartextTraffic=false):

• Meta Cloud API: to send/receive WhatsApp messages you initiate.
• Supabase: as your backend database.
• Google Firebase: Firebase Authentication and Google Sign-In for login (name, email, avatar), Cloud Firestore for your account directory record (user profile, workspace link, licence), and Firebase Crashlytics for crash diagnostics.
• AI provider (optional, off by default): if the business enables the AI assistant, the text of the customer's message and matching excerpts from the business knowledge base are sent to the AI provider the business selects and configures with its own API key — OpenAI, Anthropic (Claude), Google Gemini, or an OpenAI-compatible endpoint (for example OpenRouter, DeepSeek or Groq). While the assistant is disabled, customer messages are not sent to any AI provider.

5. Opt-in / opt-out

Messaging requires verified opt-in. Contacts texting only STOP, UNSUBSCRIBE, OPT OUT, OPTOUT, CANCEL, END or QUIT are auto-opted-out, suppressed from broadcasts, and flows cancelled. Opt-in source + timestamp shown on contact detail for Meta disputes.

6. Retention & deletion

Message history is retained for a configurable period — default 90 days, range 0–3650 (0 = keep forever) — enforced daily by a background purge worker. CRM and account data are retained until you delete. In-app: Settings → Policy & Logs → Delete Account & Wipe All Data deletes local Room + Supabase rows, removes your auth account and directory documents, and signs you out. Web self-service: /delete-account. Email privacy@chatpat.io for export/erasure within 30 days.

7. Security

TLS in transit, EncryptedSharedPreferences at rest for tokens/keys, backup exclusion, HMAC-SHA256 webhook verification (401 on mismatch), RLS deny-by-default, minify/shrink + log-stripping in release.

8. Permissions

POST_NOTIFICATIONS only for new customer message alerts (rationale shown first, deniable). No background location, mic, or contacts-phonebook read — contacts are only those you type/import.

9. Children

Business tool, 13+. No children's data knowingly collected.

10. Changes

We post updates here and in-app What's New. Continued use = acceptance.