Privacy Policy

Information we collect

• Account/admin data: agent username and authentication/session information to secure access.
• Workspace configuration: workspace identifiers and settings (e.g., connected WhatsApp Phone Number ID and WABA ID).
• Connection credentials: business and Page access tokens authorized through Meta, stored encrypted on our server to operate selected accounts. Saved tokens are not returned to the browser.
• WhatsApp message data: message content and metadata needed to display and send messages (e.g., phone number, timestamps, message IDs, delivery status), and media files you send/receive.
• Facebook and Instagram data: authorized Page and professional account identifiers and names; sender identifiers and names where supplied by Meta; message text, attachment links, timestamps and message IDs; comments and the post or media identifiers needed to display and reply to them.
• Technical data: logs for security and troubleshooting (e.g., request IDs, error logs).

How we use information

• Provide the inbox experience: receive, display and reply to messages, display comments and publish replies selected by your team, and connect accounts you authorize.
• Run automations you configure (e.g., replies, tagging, campaigns).
• Maintain security, prevent abuse, and troubleshoot issues.

How we share information

• Meta: We transmit replies and related identifiers to the WhatsApp, Messenger and Instagram APIs to deliver messages, publish comment replies and manage connected assets. Public comment replies are visible to the audience of the original content.
• Your authorized team: Chatbase is a shared team workspace application. Authorized agents can access workspace conversations; administrators manage account connections.
• Configured integrations: WhatsApp commerce and automation features may send relevant conversation and order information to configured commerce, delivery or AI service providers to perform the requested feature.
• Service providers: We may use infrastructure providers (e.g., hosting/storage) to run the service.
• Legal: We may disclose information if required by law or to protect our rights and users.

Data retention

We retain data only as long as necessary to operate the service and comply with legal obligations. Workspace owners can request deletion of stored data (see “Your rights”). Archiving a workspace suspends its message routing and preserves its history and credentials for restoration; archival is not permanent deletion. Disconnecting a social account removes its saved access token and stops new event processing, but retains inbox history. See data deletion instructions to request erasure of messages, comments, media and account data.

Security

We use reasonable administrative, technical, and physical safeguards to protect data. No method of transmission or storage is 100% secure, but we work to protect your information.

Your rights

• Request access to, correction of, or deletion of your data.
• Disconnect connected accounts and revoke Meta authorization through Meta's Business Integrations controls.

Contact

For privacy requests, contact us at: [email protected]

Changes to this policy

We may update this Privacy Policy from time to time. We will post updates on this page.