Privacy Policy - Wachatr

Information We Collect

When you use Wachatr, we may collect the following types of information to deliver our services:

Business account information — your name, email address, password hash, and company details.
Customer contact data — phone numbers, names, email addresses, and metadata of your business contacts.
Communication data — content of chat messages, media, notes, and comments sent and received through the platform.
Connected store data — order status, inventory details, and customer names synced from integration partners (e.g., Shopify, WooCommerce).
Billing & transaction data — billing name, address, GST details, transaction references, and subscription logs. Note: credit card details are processed directly by our secure payment partners and are not stored on our servers.
Technical data — IP addresses, device identifiers (advertising and device IDs), browser types, app crash logs, and websocket logs.

The information we collect is used to:

Deliver, configure, and operate the Wachatr platform services.
Enable real-time message routing via WhatsApp Business API (Meta Graph API) and other connected channels.
Provide AI-powered message analysis and intelligent auto-replies (via OpenRouter and OpenAI).
Process subscriptions and billing transactions.
Deliver real-time push alerts and live chat list updates.
Improve system security, performance, and stability.

Your data belongs to you:

Businesses retain full ownership and control of their customer databases and communications.
Wachatr does not sell, rent, trade, or monetize customer data to third parties.

For accounts utilizing WhatsApp Coexistence Mode:

Manual Request Only — Contact address book and chat history sync is only initiated via explicit user action and consent. We never perform automatic background syncing of your mobile device's address book.
No Reuse or Monetization — Any contact details or message history imported through coexistence is owned entirely by your business. We do not reuse, analyze, copy, or share this data outside of your organization for any purpose.

For users accessing the Wachatr mobile application (available on iOS and Android):

Device Contacts Protection — The mobile app does not access, retrieve, upload, or sync your mobile device's personal phone address book. Customer contacts displayed in the app are strictly those synced from your web-configured WaChatR CRM account.
Required Device Permissions — The mobile app requests standard device permissions strictly necessary to deliver notifications (new message push alerts), access the camera or photo library (for chat media attachments), and read/write storage (to cache messages and assets locally). We do not collect or store this data outside of the chat messages you send.
Technical Logging — We collect basic hardware details, app crash logs, and websocket connectivity events to ensure app performance and stability. No personal tracking or advertising identifiers are tracked.

We share personal and technical data only with sub-processors necessary to run the service:

Messaging Channels — Meta Platforms, Inc. (WhatsApp Business API, Facebook, Instagram) for message delivery.
Payment Gateways — Stripe, Razorpay, Lemon Squeezy, Paddle, PayPal, and Paystack for secure subscription processing.
AI Models — OpenAI and OpenRouter for optional AI copilot capabilities (sent via API with zero-data-retention options).
Real-time Sockets & Alerts — Pusher and OneSignal for instant device notifications and websocket synchronization.
E-commerce Partners — Shopify and WooCommerce, strictly to retrieve order status when requested by your store integrations.
Infrastructure Providers — Amazon Web Services (AWS S3) and host servers for file attachments and database storage.
Legal Authorities — if required by law or to protect user safety.

Wachatr honors your granular privacy rights under global regulations (such as GDPR and CCPA):

Access & Portability — you can request copies of your account data.
Granular Consent — you can opt-out of optional AI autopilot configurations or third-party connections.
Account Deletion — you can delete your organization and purge all associated customer contacts and messages. Simply go to your Account settings or contact our support team.

We take security seriously and implement the following measures:

Secure SSL/TLS encryption in transit.
Encryption of sensitive credentials (API keys, Meta tokens) at rest using advanced cryptographic methods.
Role-limited access control for internal support.

By using Wachatr, you consent to data processing strictly for service delivery purposes as outlined in this policy.