Privacy Policy

1. Introduction

Welcome to ChatOn ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account Information: Name, email address, password, and organization details when you register.
• Profile Information: Profile picture and other details you add to your account.
• Communication Data: Messages, files, and content you send through our platform.
• Social Media Tokens: OAuth tokens from connected platforms (Facebook, Instagram, WhatsApp, Telegram) to enable messaging features.
• Usage Data: Information about how you use our services, including log data, device information, and IP addresses.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process and deliver messages across connected channels
• Send you technical notices, updates, and support messages
• Respond to your comments and questions
• Monitor and analyze usage patterns and trends
• Detect, investigate, and prevent fraudulent or illegal activities
• Comply with legal obligations

4. Facebook and Instagram Data

When you connect Facebook or Instagram accounts to ChatOn, we access data through Meta's APIs in accordance with Meta's Platform Terms. Specifically:

• We access your Facebook Pages and Instagram Business accounts to enable messaging
• We store OAuth access tokens securely to maintain connections
• We receive and process messages, comments, and webhooks from Meta's platforms
• We do not sell or share your Meta data with third parties outside of providing our services
• You can revoke our access at any time via your Facebook/Instagram settings or by disconnecting channels in our platform

Our use and transfer of information received from Meta APIs adheres to Meta's Platform Policy.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party vendors that help us provide our services (hosting, analytics, etc.)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: For any other purpose with your explicit consent

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit (TLS/SSL) and at rest, as well as regular security assessments. However, no method of transmission over the Internet or electronic storage is 100% secure.

7. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your personal data

To exercise any of these rights, please contact us at hello@example.com.

9. Cookies

We use cookies and similar tracking technologies to track activity on our platform and hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

10. Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us so we can take appropriate action.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at: