Privacy Policy
Last updated: June 20, 2026
1. Who We Are
ChatSa (“we”, “us”) provides a platform that lets businesses (“Customers”) build and operate AI chatbots and voice agents across channels including the web and the WhatsApp Business Platform. This policy explains how we handle personal data both for our account holders and for the end users who interact with chatbots built on our platform.
2. Information We Collect
From account holders, we collect information you provide directly, including your name, email address, and payment information when you create an account or subscribe. We also collect usage data such as chatbot interactions, page views, and feature usage. When you connect a Meta or WhatsApp Business account, we receive and store your WhatsApp Business Account ID, phone number ID, business profile details, and the access tokens needed to send and receive messages on your behalf. When end users message a chatbot connected to your WhatsApp number, we process their phone number, WhatsApp profile name, and the content of the messages they send, in order to generate and deliver responses.
3. How We Use Your Information
We use the information we collect to provide, maintain, and improve our services; operate AI chatbots and voice agents; route messages to and from the WhatsApp Business Platform; process transactions; send technical notices and support messages; and respond to your requests. We do not sell your personal information, and we do not use data obtained through Meta APIs for advertising or to build user profiles unrelated to providing the service.
4. WhatsApp & Meta Platform Data
Our use of information received from Meta APIs (including the WhatsApp Business Platform and Facebook Login for Business) adheres to the Meta Platform Terms and Developer Policies, including limited-use requirements. Platform Data such as WhatsApp message content, phone numbers, and access tokens is used solely to deliver the chatbot service to the connecting business and is never sold, rented, or used for advertising. When a business connects WhatsApp, that business acts as the controller of its end users’ data and ChatSa acts as a processor on its behalf.
5. Data Storage & Security
Your data is stored on secure servers with industry-standard encryption in transit (TLS) and at rest. Access tokens and other secrets are additionally encrypted at the application layer. Inbound WhatsApp webhooks are cryptographically signature-verified before processing. We host our application and database with providers located in the United States, so your data may be processed in the United States and other countries where our service providers operate. We apply access controls and database row-level security to limit access to authorized parties.
6. Chatbot & Training Data
Documents and data you upload to train your chatbots are used solely to provide the service to you. Your training data is never used to train models for other Customers, and is not used to train the underlying foundation models. You retain full ownership of all content you upload.
7. Third-Party Services & Sub-Processors
We rely on the following service providers to operate the platform: Meta Platforms (WhatsApp Business Platform and Facebook Login); Vercel (application hosting and compute); Supabase (database and authentication); Upstash (caching and message-queue processing); Pinecone (vector storage for your knowledge base); Google, OpenAI, and Anthropic (AI model processing of chatbot messages); and Stripe (payment processing). Each provider processes data only as needed to deliver its service and is governed by its own privacy policy. We do not share Meta Platform Data with any party except the service providers strictly necessary to deliver the chatbot service.
8. Data Retention
We retain account data for as long as your account is active. Conversation and message data is retained according to your configured retention period and is automatically deleted thereafter. When you delete your account or disconnect WhatsApp, we delete or de-identify the associated personal data, including stored WhatsApp access tokens, within 30 days, except where we are required to retain it to comply with legal obligations.
9. Cookies
We use essential cookies for authentication and preferences, and analytics cookies to understand how our service is used. You can control cookie settings in your browser.
10. Your Rights & Choices
You have the right to access, correct, export, or delete your personal data at any time from your dashboard settings or by contacting us. End users who message a WhatsApp chatbot can opt out at any time by replying “STOP”, and can request deletion of their data by contacting us. To request data access or deletion, email us at info@chatsa.co.
11. Contact
If you have questions about this privacy policy or wish to exercise your rights, contact us at info@chatsa.co.