Privacy policy

INTRODUCTION

This Privacy Policy explains how ChatPlace, Inc. (“Company,” “We,” “Us,” or “Our”) collects, uses, shares, and otherwise processes your personal data and your rights regarding your personal data.

We provide you with our website https://chatplace.io as well as the services and offerings made available to you through this website (“Service”). When you use the Service or interact with us in any way (for example, by communicating via email), you may provide us with your personal data. This Privacy Policy explains how we handle and protect your personal data.

“Personal Data” means information that relates to, describes, or identifies you. This could include your name, date of birth, or email.

“You” means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

This Privacy Policy applies to your use of the Service. If you access or use the Service, you agree with and accept this Privacy Policy.

INFORMATION WE MAY COLLECT

Information You Provide to Us

When you use or access the Service, create an account, send a message to us, or participate in activities on the Service, you may input personal data into the Service.

We collect the following categories of data that you voluntarily provide to us:

• Profile information, such as full name, username and avatar, date of birth, email, mailing address, telephone number, credit card information, or billing name and billing address.
• Your or your client’s personal information connected with Instagram account, TikTok account, or Telegram bot.
• Other information that you enter, post, send, or submit to our Service (photos and videos, account settings, authentication credentials and access tokens used to connect third-party services to the Service, or information contained in the communications that you send to us by email, mail, or in any other form).

Information Collected from Third Parties

We may receive information about you from other users, third-party services, public social media platforms, or public databases. For example, social media platforms may display your mailing address, email, or phone number.

Information Collected Automatically

Certain information is collected automatically when you use or visit our Service. This information may not directly identify you by name, but may include information about your device, its use, and other technical information. This information helps us maintain security, ensure optimization of the Service for your needs, and facilitate customer support.

The tracking technologies we use to collect this information include cookies, web beacons, embedded scripts, location-identifying technologies, pixels, and other similar technologies.

The tracking technologies automatically collect the following categories of data:

• Browser data: information that your browser automatically sends when you use the Service, including IP address, browser type, browser language, settings, and Service usage patterns.
• Device data: information about the device you use, such as device type, model and manufacturer, device operating system brand and model, device hard disk drive, operating system version, and information regarding the location of your device.
• Usage data: information about your use of the Service, including patterns, time, and date of your use of the Service.
• Analytics data: general information about traffic and usage trends for the Service.

We collect information about the individual web pages or products that you view, what sites or search terms referred you to the Service, and information about how you interact with the Service. We refer to this type of data as “Tracking Cookies Data.”

We collect device information and Tracking Cookies Data using the following technologies:

• Cookies. Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. For more information about cookies, and how to disable cookies, visit https://www.allaboutcookies.org .

Two types of cookies may be used within the provision of the Service – “session cookies” and “persistent cookies”. Session cookies are temporary cookies that remain on your device until you leave the Service. A persistent cookie remains on your device for much longer or until you manually delete it (how long the cookie remains on your device will depend on the duration or “lifetime” of the specific cookie and your browser settings).

We use four categories of cookies:

• “Essential Cookies,” which are required for the Service to function;
• “Analytics Cookies,” which collect analytics data about how you use the Service;
• “Advertising Cookies,” used for conversion tracking and audience building (for example, through Meta Pixel);
• “Preference Cookies,” which remember your preferences and tailor content to your interests (for example, through Intercom).

Essential Cookies do not identify you as an individual.

We will ask for your consent before placing non-essential Cookies on your device. You may withdraw your consent or adjust your Cookie preferences at any time through our Cookie settings or by contacting us. Essential Cookies do not require consent and are necessary for the operation of our Service.

• Log files. Log files track actions occurring in the Service, and collect data including your IP address, browser type, Internet service provider, browser language, settings, and Service usage patterns, including referring/exit pages, and date/time stamps.
• Web beacons, tags, and pixels are electronic files used to record information about how you browse the Service.

Tracking Tools

The Service uses the following tracking technologies to analyze usage, improve functionality, and deliver relevant content:

• Amplitude — product analytics (feature usage, funnels, retention).
• Google Analytics — website traffic and visitor behavior.
• Meta Pixel — advertising conversion tracking and audience building.
• Google Tag Manager — tag deployment and management (does not collect data itself).
• Intercom — in-app messaging, support chat, and user engagement.

Session Replay

We use session replay technology provided by Amplitude (“Amplitude”) to record and analyze how users interact with our Service. Session replay may capture your clicks, mouse movements, scrolling behavior, page navigation, form interactions (excluding sensitive input fields such as passwords and payment details), and other on-screen activity during your use of the Service. This information helps us identify usability issues, debug technical problems, and improve the overall user experience.

We will obtain your consent before initiating session replay recording. You may withdraw your consent at any time by adjusting your cookie preferences or contacting us at support@chatplace.io. Session replay data is processed by Amplitude in accordance with its privacy policy, available on its website.

PURPOSES FOR WHICH WE USE PERSONAL DATA

We may use Personal Data for the following purposes:

• provide the Service to you, create and maintain your account, verify your identity, process transactions, and provide customer support;
• improve the Service for you, identify activity patterns and usage trends;
• communicate with you, send you emails, including confirmations and reminders, respond to your requests for assistance, or report on technical issues;
• update you about changes to the Service, send messages about new features or promotions that may interest you;
• maintain safety and security, detect, prevent, and respond to potential or actual security incidents, and protect against other illegal activities; or
• other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Service, products, services, marketing and your experience.

HOW WE DISCLOSE PERSONAL DATA

Disclosure of Personal Data to Third Parties

We do not sell, share, or otherwise disclose your personal data, but in the following circumstances, we may share your personal data with the following third parties:

• Public authorities and third parties when the law or a government order requires us to do so or when we need to protect our rights or users’ rights, or prevent crime.
• Our subsidiaries, affiliates, and co-owners. We may also disclose personal data to operators of the Service, subsequent owners, and their advisors in connection with a merger, reorganization, sale of our assets, or other change of control.
• Service providers when they need access to your personal data to perform services for us, such as web hosting, debugging services, payment processing, email and productivity services, survey providers, and customer service providers.
• Advertising partners, who may receive aggregated, de-identified information about our users to help us optimize our advertising efforts. We do not share information that directly identifies you (such as your name or email address) with advertisers.

Other legal requirements

The Company may disclose your Personal Data where it reasonably believes such disclosure is necessary to:

• Comply with a legal obligation;
• Protect and defend the rights or property of the Company;
• Prevent or investigate possible wrongdoing in connection with the Service;
• Protect the personal safety of users of the Service or the public;
• Protect against legal liability.

Detailed Information on the Processing of Your Personal Data

The service providers we use may have access to your Personal Data. These third-party vendors collect, store, use, process and transfer information about your activity on our Service in accordance with their Privacy Policies. We advise you to review their Privacy Policy separately.

For payment processing, we use Stripe, Inc. (“Stripe”). Stripe processes payment card data on our behalf in accordance with applicable payment card industry standards. Stripe’s privacy policy is available at stripe.com/privacy.

Disclosure of Anonymous Information

We may disclose anonymous information to any third party without notification. Anonymous information means information which does not allow the identification of an individual user, such as aggregated or irreversibly anonymized information about the use of our services. Such information does not constitute personal data.

SECURITY OF YOUR PERSONAL DATA

We have put in place security measures to protect your personal data from misuse, unauthorized access, disclosure, alteration, and destruction. We maintain appropriate administrative, technical, and physical safeguards. This includes password protection and other authentication controls. However, security on the internet can never be 100% guaranteed. We will take reasonable technical and organizational precautions to protect your personal data.

In the event of a personal data breach affecting your data that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay after becoming aware of the breach, providing details as required by applicable law.

USE OF ARTIFICIAL INTELLIGENCE

Our Service includes an AI-powered assistant (the “AI Agent”) that helps users automate customer communications within social media platforms. The AI Agent may access and process conversations and messages within your connected social media accounts (including text, images, videos, and other attachments), FAQ documents and knowledge bases you provide to configure the AI Agent, and user-generated content and interaction history related to your use of the Service.

To power the AI Agent, we transmit the data described above to Anthropic (Claude API), OpenAI (ChatGPT API), and Google (Gemini API). All providers operate under commercial API terms, and user data is not used to train their models. Neither ChatPlace nor its Sub-Processors use Personal Data to train, improve, or develop machine learning or artificial intelligence models.

We log AI Agent interactions in two categories. Active Data — including conversation content, AI responses, and the original message received via the social network — is retained while your account is active and deleted in accordance with the deletion procedures described below. Operational Logs — including input and output token counts and metadata — are retained for 90 days on a rolling basis and then deleted automatically. We use this information to monitor the performance and debug errors in the AI Agent, investigate and resolve technical issues, and ensure compliance with our terms of use.

You may request deletion of data processed by the AI Agent at any time by contacting us at support@chatplace.io. Deletion of AI Agent data follows the procedures described in the Data Deletion section below.

YOUR RIGHTS TO PERSONAL DATA

You have the following rights to your personal data:

• The right to know what data we have about you. To exercise this right, please contact us at support@chatplace.io.
• The right to correct, delete, or update your personal data. You can access and modify your personal data through your account or the settings section of the Service. If you need assistance, please contact us at support@chatplace.io. Please note that sometimes we may not be able to modify or delete certain information. For example, we are required by law to keep certain information for a defined period.
• The right to opt out of receiving electronic marketing communications from us. We may periodically send you emails and messages promoting the use of the Service. You can opt out (unsubscribe) of receiving these messages by following the instructions included in each email or message. If you have any additional questions, please contact us at support@chatplace.io.

Data Deletion

Account deletion. When you delete your account, all associated personal data — including AI Agent interaction data, session replay recordings, and operational logs — enters a 90-day grace period, after which it is permanently deleted from our primary systems within 30 days.

Selective deletion. You may request deletion of specific data categories (e.g., AI Agent interactions only) without closing your account by contacting support@chatplace.io. We will process verified requests within 30 days.

Third-party provider data. Upon account or data deletion, we instruct our AI service providers and analytics providers to delete any corresponding data held on their systems, subject to their respective retention schedules.

Deletion does not apply to data we are required to retain under applicable law (e.g., payment transaction records for tax and accounting purposes).

PERSONAL DATA OF CUSTOMERS FROM CALIFORNIA

If you are a California resident, you have specific rights to your personal data:

• You can request that we delete any of your personal data we have collected. But we may not be required to comply with your request if it is necessary for us to maintain your personal information for the reasons provided under California Civil Code Section 1798.105(d).
• You have the right to request in writing a list of:
  (a) the categories of personal data we have collected in the preceding 12 months;
  (b) the categories of sources from which your personal data is collected;
  (c) the business or commercial purpose for collecting your personal data;
  (d) the categories of third parties with whom we shared your personal data in the preceding 12 months; and
  (e) the specific pieces of personal data we have collected about you during the preceding 12 months.
• You have the right to request that we correct inaccurate personal information that we maintain about you.
• You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes.
• You have the right to limit the use and disclosure of your sensitive personal information to purposes necessary for providing the Service.
• You have the right not to be discriminated against for exercising any of the rights described in this section. We will not discriminate against you for exercising any of your privacy rights under applicable California law.

If you have any questions, please contact us at support@chatplace.io. Only you may make a verifiable consumer request related to your personal data. To verify your identity, we may ask you to verify the personal data we already have on file for you. We may ask you to provide your name, email address, and certain other pieces of identifying information.

We do not sell or share your personal information to facilitate or enable third parties to advertise to you. We do not sell or share the personal data of minors under 16 years of age.

PERSONAL DATA OF CUSTOMERS FROM THE EUROPEAN UNION

This section of our privacy policy outlines how we comply with the General Data Protection Regulation (“GDPR”) as it applies to individuals located in the European Union (“EU”) and the European Economic Area (“EEA”).

Data Controller

For the purposes of GDPR, ChatPlace, Inc., with its registered office located at 1111b South Governors Avenue Dover, Delaware 19904, United States, is the data controller responsible for the processing of your personal data.

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: Where you have given us explicit consent to process your personal data for specific purposes. You may withdraw your consent at any time by contacting us at support@chatplace.io or through your account settings.
• Contract: Where processing is necessary to fulfill a contract with you or to take steps at your request before entering into such a contract.
• Legal Obligation: Where we are required to process personal data to comply with legal obligations imposed by the public authorities and third parties when the law or a government order requires us to do so or when we need to protect our rights or users’ rights or prevent crime.
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided that your fundamental rights and freedoms do not override those interests. Our legitimate interests include improving and personalizing the Service, ensuring network and information security, fraud prevention.

ChatPlace, Inc. is based in the United States. If you are located outside the United States, your personal data will be transferred to and processed in the United States and potentially other countries where our service providers operate. We rely on appropriate safeguards for such transfers, including Standard Contractual Clauses approved by the European Commission where required by applicable law. By using the Service, you acknowledge that your data will be processed in the United States. If you are a business customer with a Data Processing Addendum, the transfer mechanisms specified in that agreement apply to your data.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable laws.

Account data is retained while your account is active. Upon deletion, your data enters a 90-day grace period, after which it is permanently deleted within 30 days. Operational logs (analytics, error logs) are retained for 90 days on a rolling basis.

The following retention periods apply to data processed through our AI Agent functionality:

AI Agent Interaction Data. All data related to AI Agent interactions — including end-user messages received through connected social media accounts (Instagram, TikTok, Telegram), AI Agent responses generated by our Service, token usage metrics, and system logs — is retained while your account is active. Upon account closure or receipt of a verified deletion request to support@chatplace.io, all such data enters a 90-day grace period, after which it is permanently deleted from our primary systems within 30 days.

All retention periods are subject to applicable legal hold requirements (e.g., litigation or regulatory investigations), during which data may be retained beyond the periods specified above.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right to Access: You may request access to the personal data we hold about you.
• Right to Rectification: You may request that we correct or update inaccurate or incomplete data.
• Right to Erasure: You may request that we delete your personal data under certain circumstances.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain situations.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to the processing of your personal data based on legitimate interests or direct marketing.
• Right Not to Be Subject to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless such processing is necessary for entering into or performing a contract, is authorized by law, or is based on your explicit consent.

To exercise these rights, please contact us at support@chatplace.io. Only you may make a verifiable consumer request related to your personal data. To verify your identity, we may ask you to verify the personal data we already have on file for you. We may ask you to provide your name, email address, and certain other pieces of identifying information.

You also have the right to lodge a complaint with a supervisory authority in the EU/EEA Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR.

INTERNATIONAL TRANSFERS OF PERSONAL DATA

We store and process information in the United States. We, our affiliates, or service providers can maintain facilities in any other country. The information collected about you could be transferred and processed in any of these facilities. Laws governing data collection and transfer may differ from U.S. law in the European Union and other countries. Where required by applicable law, we will implement appropriate safeguards to protect your personal data when it is transferred internationally. Our AI service providers (Anthropic, OpenAI, Google) are US-based and process data under commercial API terms that include Standard Contractual Clauses where applicable.

CHILDREN’S PRIVACY

Our Service does not address anyone under the age of 13 (or under the age of 16 where required by applicable law, including the GDPR). We do not knowingly collect personally identifiable information from anyone under the age of 13 (or such higher age as required by applicable law). If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 (or the applicable minimum age) without verification of parental consent, We delete that data promptly.

Our Service may contain links to other websites not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

CHANGES TO THE PRIVACY POLICY

This Privacy Policy can be updated from time to time. Please check back periodically for the latest version of the Privacy Policy. If there are any significant changes made to the use of your personal data, we will notify you by email or through the Service. Your use of the Service following any changes to this Privacy Policy constitutes your acceptance of any such changes.

QUESTIONS OR CONCERNS?

If you have any questions about this Privacy Policy, your privacy, or the protection of the personal data we hold about you, you can contact us at support@chatplace.io.