Privacy policy
Last updated 2026-11-05. This policy explains what Chatensy ("we") collects, why, and the choices you have. It is written for the operators of accounts ("customers") and for the people they message ("end users").
1. Who we are
Chatensy is operated by Trispark Innovate, [registered address]. Contact: hello@chatensy.in. For data protection matters, write to [privacy contact or DPO email].
2. What we collect
From customers
- Account details: name, email, phone, company, billing information.
- Meta assets you connect: WhatsApp Business Account and phone number IDs, access tokens (encrypted at rest), template and quality data.
- Usage data: pages visited in the app, actions taken, device and browser, IP address, for security and product improvement.
About end users, on behalf of customers
- Phone numbers, names and attributes customers import or that arrive with a message.
- Message content, media, delivery statuses and consent records.
- Order, cart and payment events customers' stores send us.
For end-user data we act as a processor on the customer's instructions; the customer is the controller and is responsible for obtaining consent to message them.
3. How we use it
- To provide the service: deliver messages through the WhatsApp Business Platform, run automations, show conversations to the customer's team.
- To keep accounts secure: sign-in, two-factor, audit logs, abuse detection.
- To bill and support customers.
- To improve the product, using aggregated and de-identified statistics.
We do not sell personal data and do not use end-user message content to train AI models. Optional AI features send the relevant conversation and knowledge-base text to the AI provider the customer has chosen; the customer's own API key is used when provided.
4. Sharing
We share data only with: Meta Platforms, to deliver WhatsApp and Instagram messages; payment providers the customer connects (Razorpay, Stripe, PayU); CRM and store platforms the customer connects; infrastructure and email providers under contract; and authorities when the law requires it. A current list of sub-processors is available on request.
5. International transfers
Data is stored in [hosting region, for example India / EU]. Where data leaves that region we rely on contractual safeguards such as standard contractual clauses.
6. Retention
Customer account data is kept while the account is active and for [N] days after closure. Message data is kept according to the customer's retention setting. Consent and opt-out records are kept as long as needed to honour them. Backups are purged within [N] days.
7. Your rights
Depending on where you live (including under the GDPR, the UK GDPR and India's DPDP Act), you may have the right to access, correct, export, restrict or delete your data, and to object to certain processing. End users should contact the business that messaged them; customers can run export and erasure requests directly in the app, and we will pass on any request we receive. You can also complain to your local supervisory authority.
8. Cookies
The app uses strictly necessary cookies for sign-in and security. This website uses no tracking cookies; a theme and currency preference may be stored in your browser's local storage.
9. Security
Access tokens are encrypted at rest, traffic is encrypted in transit, accounts support two-factor and single sign-on, and every administrative action is written to an audit log. Report vulnerabilities to [security contact email].
10. Children
The service is not directed at children under 18 and we do not knowingly collect their data.
11. Changes
We will post changes here and, for material changes, notify customers by email at least 14 days before they take effect.
Items shown in brackets must be completed by the operator before publishing. This template is not legal advice.