Privacy Policy

1. Introduction

Chat4Biz ("we", "us", "our") operates chat4biz.com and provides AI-powered customer assistant services to businesses. We are registered in the United Kingdom.

This policy explains how we collect, use, and protect personal data. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

• Account information: name, email address, and business name provided during registration.
• Payment information: processed securely by Stripe. We do not store card details on our servers.
• Conversation data: messages between end customers and AI assistants on our clients' websites and connected messaging channels (Instagram, Facebook Messenger, WhatsApp, Telegram).
• Usage data: pages visited, features used, IP address, and browser type.
• Cookies: essential cookies for authentication and session management.

3. How We Use Your Information

• To provide and maintain our service
• To process payments and manage subscriptions
• To send transactional notifications (handoff alerts, account emails, usage warnings)
• To improve our AI assistant technology and service quality
• To communicate service updates and changes

4. Data Processing for End Customers

Our clients embed our AI chat widget on their websites. When an end customer interacts with the widget, we process the conversation to provide AI responses.

We process this data on behalf of our clients as a data processor. Our clients are the data controllers for their end customers' data. Conversation data is stored securely and retained according to our client's settings.

5. Messaging Platforms (Instagram, Facebook Messenger, WhatsApp)

Businesses using Chat4Biz can connect their Instagram professional account, Facebook Page, or WhatsApp Business number to their AI assistant. When an end customer messages a connected channel (or comments on a post, where the business has enabled comment-to-message automations), we receive data from Meta Platforms, Inc. ("Platform Data") on the business's behalf. This includes: message and comment content, sender identifiers (such as Instagram-scoped or Page-scoped IDs), and sender profile names or usernames.

We use Platform Data solely to provide the AI-assistant service: displaying the conversation in the business's inbox and generating replies to customer messages. We do not use Platform Data for advertising, we do not sell it, and we do not share it with third parties except the processors listed in Section 7 (cloud hosting and AI processing), as needed to provide the service. We act as a data processor on behalf of the business, which remains the data controller for its customers' data.

Platform Data follows the same retention rules as other conversation data and is deleted when the business disconnects the channel or upon request. If you have interacted with a business through Instagram, Messenger, or WhatsApp and want your data deleted, visit our Data Deletion page or contact the business directly. Removing the Chat4Biz app from your Meta account settings also triggers automatic deletion via Meta's data-deletion callback.

6. Data Storage and Security

• Data is stored on Amazon Web Services (AWS) infrastructure in the EU (London, eu-west-2)
• All data is encrypted in transit (TLS/SSL) and at rest
• We implement appropriate technical and organisational security measures
• Access to personal data is restricted to authorised personnel only

7. Third-Party Services

We use the following third-party services to operate our platform:

We ensure all third-party providers maintain appropriate data protection standards.

8. Your Rights (UK GDPR)

Under UK GDPR, you have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise these rights, contact us at support@chat4biz.com. For data received through Instagram, Messenger, or WhatsApp, you can also use our Data Deletion page.

9. Data Retention

• Account data: retained while your account is active, deleted within 30 days of account closure.
• Conversation data: retained according to client settings, default 90 days.
• Payment records: retained as required by UK tax law (up to 6 years).

10. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. You can manage cookies through your browser settings.

11. Children's Privacy

Our service is not directed at individuals under 18. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this policy from time to time. We will notify registered users of significant changes via email. Continued use of the service after changes constitutes acceptance.

13. Contact Us