Privacy Policy

WhatsChat ("we," "us," "our") provides a WhatsApp chat widget for websites. This Privacy Policy explains what data we collect, why, and how you can control it.

Data we collect

Account data. When you create a workspace, we store your business name, email address, and an encrypted password (handled by our authentication provider — we never see or store your password in plain text).

Widget and workspace data. Widget configuration (WhatsApp number, scenario messages, brand colors, domain restrictions) and chat-initiation counts, so your dashboard can show you what's happening.

Billing data. If you upgrade to Pro, payments are processed by Stripe. We store your Stripe customer and subscription IDs so we can sync your plan — we never see or store your card details.

Visitor data from your widget. The widget itself does not collect or store any personal data about your website's visitors. When a visitor clicks the chat button, they are taken directly to WhatsApp — the conversation happens between you and them on WhatsApp, not through us.

How we use your data

• To operate and maintain your account and widgets
• To process payments and manage subscriptions
• To send essential account emails (confirmation, password reset, billing receipts)
• To provide customer support
• To improve the product

We do not sell your data, and we do not use it for advertising.

Who we share data with

We use a small number of infrastructure providers to run WhatsChat:

• Supabase — database hosting and authentication
• Stripe — payment processing
• Vercel — application hosting

Each of these providers processes data on our behalf under their own privacy and security commitments. We do not share your data with anyone else except where required by law.

Data retention

We retain your account data for as long as your account is active. If you delete your account, we delete your workspace data within a reasonable period, except where we're required to retain billing records for legal or tax purposes.

Your rights

If you're in the EU/EEA or another jurisdiction with similar protections, you have the right to access, correct, export, or delete your personal data, and to object to certain processing. Contact us at the email below to exercise these rights.

International transfers

Our infrastructure providers may process data outside your country. Where this happens, it's covered by their own compliance frameworks (such as Standard Contractual Clauses for EU data).

Changes to this policy

We may update this policy from time to time. We'll update the date below when we do. Material changes will be communicated by email or in-app notice.

Contact us

Questions about this policy? Email us at privacy@whatschat.io.