Privacy Policy — ChatBolt

What we never do

We never sell, rent, share, license, or expose your data, your messages, your WhatsApp contacts, or your customers' phone numbers — to anyone, for any purpose, ever. We do not use your data to train any other tenant's AI. We do not use any of it for advertising or marketing analytics. Your knowledge base, your customers' messages, and their phone numbers are isolated to your account in a private database. Only you and the team members you invite can see them.

1. Who we are

ChatBolt ("we", "us") provides a software service that helps your business communicate with customers over WhatsApp and a website chat widget. You ("the customer") are the controller of your customers' personal data; we are the processor acting on your instructions.

2. What we collect

Account info — name, email, password (hashed), company name, phone — to create and secure your account.
Billing info — handled by our payment processor; we don't store full card numbers.
Your messages — the conversations between you/your team and your customers, sent through your connected channels. Stored in your private database so your team has history.
Your customers' identifiers — typically a WhatsApp phone number and a display name (provided by WhatsApp). Stored solely to deliver and route messages to/from your team.
Usage metadata — message counts, response times, sign-in timestamps — so you can see reports and we can keep the service healthy.

3. How we secure it

Each customer's data sits in a per-tenant isolated Postgres database. Other tenants cannot query it.
Sensitive credentials (your channel access tokens, integration keys, SMTP password) are encrypted at rest with AES-256-GCM.
All traffic is TLS-encrypted in transit. The website chat widget loads over HTTPS.
Backups are encrypted. Server access is restricted and logged.

4. Sub-processors

We use the following third-party services to deliver our product. We never share data with them beyond what's strictly required for the function shown:

Meta (WhatsApp Business API) — to send and receive your WhatsApp messages.
2Checkout (Verifone) — billing and payment processing for paid plans.
Our SMTP provider — to send you transactional email (verify, reset, billing notices).
Our hosting provider — compute, network, and storage.
Bot-protection and AI inference run on infrastructure we operate directly; no third-party processor handles your chat content.

5. Data residency, retention & deletion

Your data is stored on servers we operate. If you cancel your account, we retain your data for 30 days in case you change your mind, then it is permanently deleted from primary storage. Backups roll off according to their schedule (no more than 90 days). You may request earlier deletion at any time at contact@chatbolt.app.

6. Your rights (GDPR, CCPA, and similar laws)

Access — request a copy of your data.
Correct — fix anything inaccurate.
Delete — have it removed (subject to legal retention obligations like billing records).
Export — download your contacts, conversations, and knowledge base.
Object / restrict processing — for anything you didn't ask us to do.

Email contact@chatbolt.app with a request from the email tied to your account and we will respond within 30 days.

7. Children

The service is for businesses; it is not designed for use by individuals under 18, and we do not knowingly collect data from minors.

8. International transfers

Where data crosses borders, we rely on standard contractual clauses and equivalent safeguards as required by applicable law.

9. Security incidents

If we ever experience a security breach that affects your data, we will notify affected customers without undue delay and in any case within 72 hours of becoming aware.

10. Changes to this policy

We will post material changes to this page and email account owners. The "Last updated" date at the top tells you when the policy last changed.

11. Contact

Questions, complaints, or requests: contact@chatbolt.app, or WhatsApp +92 311 1766766.