Privacy Policy — ChattyMex

1. Who We Are

ChattyMex ("we", "us") is a software service operated from Dhaka, Bangladesh, that provides AI-powered customer conversation automation for businesses ("Merchants") on Facebook Messenger, WhatsApp, and Instagram.

2. Data We Collect

From Merchants (our customers): name, email, phone, business information, payment records (processed by bKash/SSLCommerz — we do not store card numbers), Facebook Page / WhatsApp Business / Instagram account identifiers and access tokens (encrypted at rest).

From Merchants' customers ("End Users"), via Meta Platforms: message content, sender platform ID, name/profile photo where provided by the platform, and order details voluntarily shared in conversation (name, phone, delivery address).

Automatically: usage logs, device/browser info, cookies for authentication and analytics.

3. How We Use Data

To generate automated replies on behalf of the Merchant using AI models; to create and sync orders at the Merchant's direction; to build a Merchant-specific knowledge base from the Merchant's own page content and website; to provide analytics to the Merchant about their own conversations; and to operate, secure, and improve the Service (aggregated/de-identified only).

We do NOT sell personal data. We do NOT use End User message content to train foundation AI models.

4. Meta Platform Data

Our use of data received from Meta APIs complies with the Meta Platform Terms and Developer Policies, including the Limited Use requirements. Data obtained via Meta is used solely to provide the Service to the Merchant who authorized the connection.

5. AI Processing Disclosure

Messages may be processed by third-party AI model providers (e.g., LLM API providers) under data processing agreements, solely to generate responses. End Users interacting with a Merchant page are interacting with an automated system; Merchants are required to disclose automation where applicable law or platform policy requires.

6. Sharing

We share data only with: (a) sub-processors (hosting, AI providers, payment gateways, courier fraud-check APIs); (b) the Merchant whose page the End User contacted; (c) authorities where legally required under Bangladeshi law.

7. Retention

Message data is retained while the Merchant account is active; conversation logs older than 6 months may be archived. Upon account deletion, data is removed within 30 days (backups within 90 days).

8. Security

Encryption in transit (TLS) and at rest for access tokens; role-based access; tenant isolation (row-level security); audit logging.

9. Your Rights

Merchants may access, correct, export, or delete their data from the dashboard or by emailing privacy@chattymex.com. End Users may request deletion via the Merchant or directly — see the Data Deletion page.

10. Children

The Service is not directed to individuals under 18 as account holders.

11. Changes & Contact

We will notify Merchants of material changes. Contact: privacy@chattymex.com, Dhaka, Bangladesh.