Privacy policy

1. Who we are

247ChatApp is operated by [legal entity name], [registered address] ("we", "us"). We are the controller of the personal data we collect about the people who visit our website and sign up for an account.

When a workspace uses 247ChatApp to talk to its own customers, the workspace decides what those conversations contain and why. For that data, the workspace is the controller and we process it on the workspace's behalf, under our data processing terms.

2. What this policy covers

This policy covers our website, the 247ChatApp application and the emails we send about your account. It does not cover the messaging services you connect (such as WhatsApp, Instagram, Messenger, Telegram or LinkedIn), which have their own privacy policies.

3. Information we collect

We collect only what we need to run the service:

• Account details: your name, email address, password (stored only as a secure hash) or the sign-in provider you use, and your profile picture if you add one.
• Workspace details: the workspace name, its members, their roles and teams, and invitations sent.
• Workspace content: the conversations, messages, attachments, contacts, tags, notes and custom fields that arrive through the channels a workspace connects, or that its members add.
• Channel connection details: an identifier for each connected account and its connection status. We do not store your passwords for the messaging services you connect.
• Usage and technical data: log entries, error reports, IP address, browser and device type, kept to operate and secure the service.
• Messages you send us: what you write when you contact support.

4. How we use it

• To provide the service: sign you in, show your workspace's inbox and contacts, and deliver the messages your team sends.
• To keep it secure: detect abuse, rate-limit requests and investigate incidents.
• To fix and improve it: find errors and understand which features are used.
• To talk to you: send sign-in codes, invitations, account and service notices, and answers to your questions.
• To meet legal obligations: keep records the law requires, and respond to lawful requests.

We do not sell personal data, and we do not use workspace content to advertise to anyone.

5. Legal bases

Where data protection law such as the GDPR applies, we rely on: performing our contract with you (running your account and workspace); our legitimate interests (security, fixing errors, improving the service), balanced against your rights; your consent, where we ask for it; and legal obligations. [Legal review: confirm the lawful bases and any consent flows.]

6. Who we share it with

We share data only with service providers who process it for us under contract, and only as much as they need:

• Database, authentication and file storage: Supabase.
• Connections to messaging channels: Unipile, which links the accounts a workspace connects.
• Error monitoring: Sentry, with personal data removed from reports where possible.
• Hosting: [hosting provider and region].
• Email delivery: [email provider].

We may also disclose data when the law requires it, or to protect the rights and safety of our users and the public. If the business is sold or merged, data may pass to the new owner under this policy.

7. International transfers

Some of our providers may process data outside your country. Where data leaves the European Economic Area or the United Kingdom, we use safeguards such as the European Commission's standard contractual clauses. [Legal review: list the transfers and safeguards.]

8. How long we keep it

We keep account and workspace data for as long as the account or workspace exists. When a workspace is deleted, its content is removed from the live system within [number] days and from backups within [number] days. Logs and error reports are kept for [number] days. [Legal review: confirm the retention periods.]

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict how we use it, and to withdraw consent at any time. You can also complain to your data protection authority.

If your data is in a workspace someone else runs, please contact that workspace first: they control it. We will help them answer you.

To use any of these rights, contact us at [privacy contact email].

10. Security

We protect data with encryption in transit, access controls that keep each workspace's data separate, and the least access our staff and systems need. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

11. Cookies and local storage

We use only the cookies the service needs to work, such as the one that keeps you signed in. Your browser's local storage remembers whether you chose the light or dark theme; it never leaves your device. We do not use advertising cookies. [Legal review: update if analytics are added.]

12. Children

247ChatApp is a business tool and is not meant for children. We do not knowingly collect data from anyone under [16].

13. Changes to this policy

When we change this policy, we will update it on this page and, for important changes, tell account owners by email before the change takes effect.

14. Contact us

Questions about this policy or your data: [privacy contact email], or write to [legal entity name], [registered address].