Privacy Policy

This policy applies to businesschatagent.ai, the BusinessChatAgent dashboard, our REST API, our embeddable chat widget, and our WhatsApp Business integration. It does not cover third-party sites we link to, or the separate privacy practices of platforms we integrate with (such as Meta/WhatsApp, our AI model providers, or our payment processor), which are described where relevant below and governed by their own policies.

a) Account & business profile data. Name, email, password (hashed), company/business details, team member information, and any content you enter while configuring an agent (system instructions, tone, knowledge base documents, ticket and lead-generation settings).

b) Uploaded documents. FAQs, catalogues, policies, and other files you upload to a knowledge base so your agent can answer questions about your business.

c) Conversation data. Messages exchanged between End Users and an agent — via the web widget, API, or WhatsApp — including message content, timestamps, and any contact details an End User voluntarily provides (e.g. through a lead-capture or support-ticket flow).

d) WhatsApp connection data.When a Customer connects a WhatsApp Business phone number, we receive and store the phone number ID, WhatsApp Business Account (WABA) ID, business ID, display phone number, and verified business name provided by Meta’s Embedded Signup flow. See Section 4 for details specific to WhatsApp.

e) Technical & usage data. IP address, browser/device information, log data, and analytics about how the dashboard and widget are used, collected to keep the Service secure and to improve it.

f) Billing data. Subscription plan, billing address, and transaction history. Card and payment details are collected and processed directly by our payment processor — see Section 6.

• To provide, operate, and maintain the Service, including generating agent responses.
• To let Customers configure, test, and monitor their agents and review conversation history.
• To process lead-capture submissions and support tickets raised through an agent.
• To send transactional emails (account, billing, security notices) and, where permitted, product updates.
• To detect, prevent, and investigate fraud, abuse, and security incidents.
• To comply with legal obligations and enforce our terms.
• To improve agent quality, reliability, and platform features using aggregated or de-identified data.

We do not sell personal information, and we do not use Customer conversation data to train shared or public AI models.

BusinessChatAgentlets a Customer connect their WhatsApp Business phone number to an agent using Meta’s Embedded Signup (Facebook Login for Business) and the WhatsApp Business Platform (Cloud API). When this integration is active, we act as a Business Solution Provider / Tech Provider on behalf of the Customer, and both BusinessChatAgent and Meta process data as described below.

What we receive from Meta.During connection, Meta issues an authorization code that we exchange for a business access token, and shares the phone number ID, WABA ID, business ID, and verified display name for the connected number. Once connected, we receive inbound WhatsApp messages sent to that number via Meta’s webhooks, and we send outbound agent replies and message templates through the WhatsApp Business API.

What this means for End Users.If you message a business’s WhatsApp number that is powered by BusinessChatAgent, your phone number, WhatsApp profile name, and message content are processed by BusinessChatAgent to generate a response (see Section 5) and by the Customer who owns that WhatsApp number. This data is also subject to Meta’s own data-processing terms and privacy policy, independent of this page. We only receive and process messages sent to a connected business number — not your personal, end-to-end encrypted WhatsApp chats with other contacts.

Your controls.You can stop messaging a connected business number, or block/report it, at any time using WhatsApp’s native controls. Customers can disconnect their WhatsApp integration from the BusinessChatAgent dashboard at any time, which revokes our access to that number going forward.

Meta’s own policies. For how Meta and the WhatsApp Business Platform separately handle data, please review:

• WhatsApp Business Data Processing Terms
• Meta Platform Terms (developers.facebook.com)
• Meta Developer Policies
• Meta Privacy Policy
• WhatsApp Business Messaging Policy

To generate agent responses, message content (and relevant knowledge-base context) is sent to third-party AI model providers, currently including OpenAI and Google (Gemini), acting as our sub-processors under their respective API/business terms. These providers process conversation content solely to generate a response for the relevant agent and, under our commercial API agreements with them, do not use that content to train their own general-purpose models. We may update or add model providers over time as the Service evolves; this section will be updated accordingly.

Subscription payments are processed by Dodo Payments, our third-party payment processor. Card numbers, bank details, and other sensitive payment information are collected and stored directly by Dodo Payments under its own privacy policy and security standards — BusinessChatAgent does not store full card numbers on its own servers. We retain only the billing metadata needed for invoicing, subscription management, and tax compliance (e.g. plan, amount, billing address, transaction status).

We share information only as needed to run the Service:

• Meta / WhatsApp Business Platform — to deliver and receive WhatsApp messages for Customers who enable that integration.
• AI model providers (OpenAI, Google) — to generate agent responses.
• Dodo Payments — to process subscription billing.
• Infrastructure providers (hosting, storage, and email delivery) — under contracts requiring them to protect your data and use it only to provide services to us.
• Legal & safety — where required to comply with law, enforce our terms, or protect the rights, safety, or property of BusinessChatAgent, our Customers, or others.
• Business transfers — if BusinessChatAgent is involved in a merger, acquisition, or asset sale, data may be transferred as part of that transaction, subject to this policy.

We do not sell personal information to third parties.

We use essential cookies and similar local storage to keep you signed in, remember dashboard preferences, and keep the Service secure. We do not currently use third-party advertising cookies. If this changes, we will update this section and provide any consent controls required by applicable law.

We retain account and business profile data for as long as the account is active, and conversation/ticket/lead data for as long as reasonably needed to provide the Service, support the Customer’s use of their agent, and meet legal or accounting obligations. Customers can delete knowledge-base documents, tickets, or leads from their dashboard at any time. When an account is closed, we delete or anonymize associated data within a reasonable period, except where retention is required by law (e.g. billing records).

We use industry-standard safeguards to protect your data, including encryption in transit (TLS) and access controls that restrict who inside BusinessChatAgent can view Customer and End User data. No method of transmission or storage is 100% secure, and we encourage you to use a strong, unique password and to report any suspected security issue to admin@businesschatagent.com.

BusinessChatAgentis based in India, and where the Digital Personal Data Protection Act, 2023 (“DPDP Act”) applies, you (as a “Data Principal”) have the right to:

• Request a summary of the personal data we hold about you and how it is processed.
• Request correction or completion of inaccurate or incomplete personal data.
• Request erasure of personal data that is no longer necessary for the purpose it was collected.
• Withdraw consent for processing that relies on consent, at any time.
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
• Register a grievance and, if unresolved, escalate it to the Data Protection Board of India.

If you are located outside India, you may have equivalent rights under your local privacy law (such as access, rectification, erasure, restriction, portability, or objection). To exercise any of these rights, contact our Grievance Officer at admin@businesschatagent.com. We will respond within a reasonable timeframe as required by applicable law.

Note that for WhatsApp conversations, some data (such as delivery/read receipts) is controlled by Meta directly — requests relating specifically to Meta’s processing should also be directed to Meta via the resources linked in Section 4.

The Service is intended for business use and is not directed to children. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, contact us at admin@businesschatagent.com and we will take appropriate action.

We and our sub-processors (including our AI model providers, WhatsApp/Meta, and Dodo Payments) may process and store data in countries other than your own, including outside India. Where required, we rely on appropriate contractual or legal safeguards for such transfers.

We may update this Privacy Policy from time to time to reflect changes to the Service or applicable law. We will update the “Effective date” above and, for material changes, provide additional notice (such as an in-dashboard notice or email) before the change takes effect.

If you have questions about this Privacy Policy or how your data is handled, contact us at:

BusinessChatAgent
Email: admin@businesschatagent.com