Privacy Policy
Last Updated: October 4, 2025
Introduction
ChatsFlow ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, with whom we share it, how long we retain it, and what rights you have regarding your information.
By using our services, you agree to the practices described in this Policy. Use of our services is also subject to our Terms of Service
Information We Collect
1. Information You Provide
- Forms and Account Signup: when you sign up, subscribe to our newsletter, or contact us via forms on our website, we may collect your first name, last name, email, phone number (optional), and company name.
- Messaging integrations: phone number, messages, attachments, and related metadata.
2. Automatically Collected Information
- Technical data: IP address, browser type, operating system, timestamps.
- Server logs: access, errors, and activity logs.
- Cookies and tracking: see section Cookies and Analytics.
3. Future Analytics Data
We may process aggregated and anonymized data to improve our services (analytics features under development).
How We Use Information
We use your data for the following purposes:
- To provide our services: account creation, messaging integrations, support.
- To communicate with you: newsletters, updates, customer support.
- For analytics and service improvements: with your consent, when applicable.
- To comply with legal obligations.
Legal Basis for Processing
Depending on your location, especially if GDPR applies, we rely on:
- Contract performance: providing and maintaining ChatsFlow services.
- Consent: newsletters, optional analytics/cookies.
- Legitimate interest: ensuring security, fraud prevention, log analysis.
- Legal obligation: compliance with applicable laws.
Cookies and Analytics
We use:
- Essential cookies: required for service operation.
- Analytics/marketing cookies: only with your consent.
You can manage or withdraw your cookie preferences anytime via browser settings
Sale of Personal Data
ChatsFlow does not sell your personal data to third parties.
If you are a California resident, you have the right under the California Consumer Privacy Act (CCPA/CPRA) to opt out of the sale of your personal information. Since we do not sell data, this right is not applicable. However, you can Contact Us at any time to review or delete your information.
Sharing of Information
We may share personal data with trusted service providers who act as processors on our behalf, including:
- Hosting and infrastructure providers.
- Messaging integration partners.
- Analytics providers (if enabled).
All third parties are bound by contracts (DPAs) requiring them to protect your data and use it only for agreed purposes.
Third-Party Platforms
When you connect messaging platforms (such as WhatsApp, Telegram, Signal, or others) to ChatsFlow, the data exchanged through these integrations (e.g., messages, attachments, metadata) is also subject to the respective platform’s own privacy policies and terms of service.
We do not control how these third-party platforms handle your data, and we encourage you to review their privacy policies to understand how they collect, use, and share information:
International Data Transfers
If your data is transferred outside your country or the EEA, we ensure appropriate safeguards such as:
- Standard Contractual Clauses (SCCs).
- Adequacy decisions by the European Commission.
- Additional technical and organizational measures.
Data Retention
We keep personal data only for as long as necessary:
- Accounts: while active, and 1 year after deletion.
- Newsletters: until you unsubscribe.
- Server logs: 3 months.
- Messaging data: as long as the integration is active, or until deleted by the user.
Data Security
We implement security measures, including:
- Encryption in transit (TLS).
- Access controls and role-based permissions.
- Regular backups.
- Security monitoring and audits.
Data Breach Notification
In the event of a data breach that may compromise the security, confidentiality, or integrity of your personal data, we will take all reasonable steps to mitigate the impact and prevent further unauthorized access.
If required by law, we will notify the relevant supervisory authorities and affected users without undue delay, and in accordance with applicable regulations (e.g., GDPR 72-hour rule).
Your Rights
Depending on applicable laws (e.g., GDPR, national regulations), you may have certain rights regarding your personal data, including the right to access, correct, delete, or restrict its processing.
To exercise your rights, Contact Us
Children's Privacy
ChatsFlow is not intended for children under 16. If we learn that we have collected data from a child without parental consent, we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be published on this page, and significant changes may be communicated via email or in-app notifications.
Contact
If you have questions or concerns about this Privacy Policy or our data practices, please Contact Us