Legal Document

Privacy Policy

At ChatPilo, your privacy is our priority. This policy explains how we collect, use, share, and protect your personal information when you use our AI-powered messaging automation platform.

Effective Date: January 1, 2025Last Updated: July 1, 2025

This Privacy Policy applies to Chat Pilo ("ChatPilo", "we", "our", or "us"), operated by Shah Technology, located at House 42, Road 5, Dhanmondi, Dhaka, Bangladesh. It governs your use of our website at chatpilo.com and all associated services, applications, and integrations including WhatsApp Business API, Facebook Messenger, and Instagram Messaging.

1. Information We Collect

1.1 Information You Provide Directly

When you register for ChatPilo, we collect your name, email address, phone number, business name, and billing information. When you interact with our platform, we also collect preferences, settings, and any content you create or upload.

1.2 Information Collected Through Integrations

When you connect third-party platforms such as WhatsApp Business API, Facebook Messenger, or Instagram Messaging, we access messaging data, page information, user identifiers, and conversation histories solely to provide our AI automation services. We only request permissions that are necessary to deliver the features you enable.

1.3 Technical & Usage Data

We automatically collect IP addresses, browser type, device identifiers, operating system, pages visited, session duration, and clickstream data to improve platform performance, diagnose issues, and enhance your experience.

1.4 Cookies & Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to maintain session state, remember your preferences, and analyze aggregate usage patterns. For more details, please refer to our Cookie Policy.

2. How We Use Your Information

2.1 Service Delivery

We use collected data to operate and maintain ChatPilo, process transactions, authenticate users, provide customer support, and send service-related communications including account notifications and security alerts.

2.2 AI & Automation Features

Conversation data processed through our integrations (WhatsApp, Facebook, Instagram) is used exclusively to power AI-generated responses, train our models with your explicit consent, and improve the accuracy and relevance of automated replies for your business.

2.3 Analytics & Improvement

We analyze usage patterns and performance metrics to improve our platform, identify and fix bugs, develop new features, and personalize your experience. All analytics are performed on aggregated or anonymized data where possible.

2.4 Legal & Compliance

We may use your information to comply with applicable laws, respond to lawful requests from public authorities, enforce our Terms of Service, and protect the rights, property, or safety of ChatPilo, our users, and the public.

3. How We Share Your Information

3.1 We Do Not Sell Your Data

ChatPilo does not sell, rent, or trade your personal information or your customers' data to any third parties for marketing or advertising purposes. Your data belongs to you.

3.2 Service Providers

We engage trusted third-party service providers to assist in delivering our services, including cloud infrastructure providers (e.g., AWS, Google Cloud), payment processors, and analytics platforms. These providers are bound by strict data processing agreements and are only permitted to use your data to perform services on our behalf.

3.3 Platform Integrations

When you connect ChatPilo to Meta platforms (Facebook, WhatsApp, Instagram), data is exchanged with Meta in accordance with Meta's Platform Terms and Data Policy. We act as a data processor for messages transmitted through these integrations. We adhere to all applicable Meta Platform Policies.

3.4 Legal Disclosures

We may disclose your information when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights or prevent imminent harm.

4. Data Retention

4.1 Retention Periods

We retain your account data for as long as your account is active and for a period thereafter to comply with legal obligations. Conversation data processed through messaging integrations is retained for a maximum of 90 days by default, after which it is automatically deleted unless you configure a different retention period in your account settings.

4.2 Deletion Requests

You may request deletion of your personal data at any time by contacting us at info@chatpilo.com. Upon verification of your identity, we will delete your data within 30 days, subject to any legal obligations that require us to retain certain records.

5. Your Rights

5.1 Access & Portability

You have the right to access the personal information we hold about you and to receive a copy in a structured, machine-readable format.

5.2 Rectification

You may request correction of inaccurate or incomplete personal data we hold about you.

5.3 Erasure

You have the right to request deletion of your personal data, subject to certain legal exceptions such as compliance obligations or ongoing contractual relationships.

5.4 Restriction & Objection

You may request that we restrict processing of your data in certain circumstances and object to processing based on our legitimate interests.

5.5 Withdrawal of Consent

Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Security

6.1 Security Measures

We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.3 encryption in transit, multi-factor authentication, role-based access controls, and regular third-party security audits to protect your data from unauthorized access, alteration, disclosure, or destruction.

6.2 Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and applicable regulatory authorities within 72 hours of becoming aware of the breach, as required by applicable law.

7. International Data Transfers

7.1 Cross-Border Transfers

ChatPilo operates globally and may transfer your data to countries outside your jurisdiction, including Bangladesh, the United States, and the European Economic Area. Where we transfer data internationally, we rely on approved transfer mechanisms such as Standard Contractual Clauses to ensure your data receives adequate protection.

8. Children's Privacy

8.1 Age Restriction

ChatPilo services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child under 18, we will take steps to delete that information promptly.

9. Changes to This Policy

9.1 Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes by email or by posting a prominent notice on our website at least 30 days before the changes take effect. Your continued use of ChatPilo after the effective date constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection team:

Company

Chat Pilo (Shah Technology)

Address

House 42, Road 5, Dhanmondi, Dhaka, Bangladesh