Privacy Policy
Last updated: <TODO: дата публикации>
This policy explains what Chatera does with personal data when you use the hosted service at chatera.ai. If you run the open-source core on your own servers, none of it applies: that installation sends us nothing, and you are the only operator involved.
Who we are
The hosted Chatera service is operated by <TODO: юридическое лицо, регистрационный номер и адрес>, referred to here as "we". For anything in this policy, including requests about your data, write to support@chatera.ai.
Two roles, and which one we are in
For your own account — your email, your phone number, your plan — we decide why and how the data is processed, so we are the controller.
For the conversations your AI manager holds with your customers, you decide: it is your business, your number and your customers. There we act on your instructions as a processor, and you are responsible for having a lawful basis to message those people in the first place.
What we collect
Four kinds of data, for four different reasons.
- Account data: name, email address, phone number, the business you registered, and your plan.
- Business content: everything you give the manager to work from — prices, services, opening hours, addresses, uploaded files and the instructions you write for it.
- Conversation data: messages exchanged between your manager and your customers over WhatsApp, including the customer phone numbers, timestamps, and any media sent either way.
- Technical and acquisition data: IP address, browser and device type, pages visited, and the campaign or referring site a visit arrived from — the last of these carried as a single opaque parameter from this marketing site to the sign-up page.
Why we process it
- To run the service: generating replies, delivering them to WhatsApp, and showing you the conversations.
- To bill you, and to count what your plan meters.
- To answer support requests, which usually requires looking at the conversation you are asking about.
- To keep the service secure: detecting abuse, rate-limiting, and investigating incidents.
- To understand which parts of the product are used, in aggregate. This is the only purpose for which we use data that is not strictly necessary to serve you, and <TODO: применимый закон> determines whether we ask you first.
What we do not do
We do not sell personal data, and we do not use your conversations or your business content to train models — neither ours nor anyone else's. Our agreements with the model providers listed below prohibit them from doing so on their side: <TODO: подтвердить формулировки договоров с провайдерами моделей>.
This marketing site carries no advertising or analytics scripts from third parties at all. The only thing it stores in your browser is a theme preference and, if you arrived from a campaign, the campaign identifier — both of which stay in your browser until you leave.
Who else sees the data
Only the processors needed to run the service, each with a contract limiting them to that purpose.
- Model providers, which receive the conversation context needed to produce a reply: <TODO: список провайдеров>.
- Meta Platforms, which operates WhatsApp and necessarily carries every message.
- Our hosting and infrastructure providers: <TODO: список поставщиков инфраструктуры>.
- Our payment provider, which handles card details directly — we never receive or store a card number.
- Authorities, where we are legally required to disclose, and only to the extent required.
Where data is stored
Account, business and conversation data is stored in <TODO: регион хранения данных>. Model providers and Meta may process data outside that region as part of delivering their own service; where that is a cross-border transfer under applicable law, it is covered by <TODO: механизм трансграничной передачи>.
How long we keep it
Conversations and business content are kept while your account is active, and for <TODO: срок хранения после закрытия аккаунта> after it closes, so an account reopened by mistake is not an account emptied by mistake. Billing records are kept for as long as tax law requires: <TODO: срок хранения бухгалтерских документов>.
You can ask us to delete a conversation, a contact, or the whole account sooner, and we will, except where we are legally required to keep a record of the transaction.
Security
Data is encrypted in transit. Access tokens for WhatsApp and for model providers are encrypted at rest with a key held outside the database. Access to production data is limited to staff who need it and is logged.
None of that makes a breach impossible. If one happens and it affects you, we will tell you and the relevant authority within the period the applicable law sets: <TODO: срок уведомления о нарушении>.
Your rights
Subject to <TODO: применимый закон>, you can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to export it in a machine-readable form, or object to a particular use. Write to support@chatera.ai and we will answer within <TODO: срок ответа на запрос>.
If one of your customers asks you to delete their conversation, you can do it yourself from the inbox; if they write to us directly, we will point them to you, because for those messages you are the controller and we are not.
You can also complain to a supervisory authority: <TODO: надзорный орган и юрисдикция>.
Children
The service is for businesses and is not directed at children. We do not knowingly collect data from anyone under <TODO: минимальный возраст>.
Changes to this policy
We update this page when the practice changes, and the date at the top changes with it. If a change materially affects how we use data you have already given us, we will tell you before it takes effect.