Privacy Policy

ChatBiz ("we," "us," or "our") respects your privacy and is committed to protecting the personal data of business owners who use our platform and the customers who message those businesses through WhatsApp. This Policy explains what data we collect, why we collect it, and the choices you have.

This Policy applies to our website, dashboard, and all services operated under the ChatBiz name.

Account information: When you register, we collect your name, email address, password (stored hashed, never in plain text), and business details such as business name and industry.

Customer conversation data: Messages exchanged between your customers and your AI assistant via WhatsApp are stored so your dashboard can display conversation history and so the AI can maintain context.

Knowledge base content: Any PDFs, FAQs, or business information you upload to train your AI assistant.

Payment information: Card and payment details are collected and processed directly by Paystack, a PCI-DSS Level 1 certified processor. We never receive or store your customers' or your own full card details.

Usage data: We collect analytics such as message volume, response times, and feature usage to improve the platform and display your dashboard analytics.

• To provide and operate the AI-powered WhatsApp customer service platform
• To process payments and manage your subscription
• To generate the analytics and conversation history shown in your dashboard
• To communicate with you about your account, updates, or support requests
• To detect and prevent fraud, abuse, or violations of our Terms of Service
• To comply with legal obligations under Nigerian law

We process personal data in accordance with the Nigeria Data Protection Regulation (NDPR). Our legal bases include: performance of a contract (providing the Services you signed up for), your consent where explicitly given, and our legitimate interest in operating and improving the platform, balanced against your rights.

We share data only with service providers necessary to operate ChatBiz, including:

• Meta (WhatsApp Business Cloud API) - to deliver and receive WhatsApp messages
• Paystack - to process subscription payments
• Cloud hosting and database providers - to securely store and run the platform
• AI and embedding providers - to generate AI responses from your knowledge base

We do not sell, rent, or share your data with advertisers or unrelated third parties for marketing purposes.

We use a small number of essential cookies to keep you signed in and remember your session on our dashboard. We do not use third-party advertising or tracking cookies. Because these cookies are strictly necessary for the platform to function, we do not operate a separate cookie consent banner - disabling them in your browser will prevent you from staying logged in.

We retain your account and conversation data for as long as your account is active. If you cancel your subscription, data is retained for a grace period in case you resubscribe, after which it is permanently deleted unless we are legally required to retain it longer. Free plan accounts inactive for 90 days may be deleted after notice.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at privacy@chatbiz.ng.

We encrypt data in transit using TLS 1.2 or higher and encrypt data at rest. Access to customer conversation data within ChatBiz is restricted to what is necessary for support and platform operation. See our Security & Data page for more detail.

ChatBiz is intended for use by business owners aged 18 and over. We do not knowingly collect personal data directly from children. If you believe a child has provided us with personal data, contact us and we will take steps to delete it.

Some of our service providers may process data outside Nigeria. Where this occurs, we take reasonable steps to ensure such providers maintain a comparable standard of data protection to that required under the NDPR.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above and notify you by email at least 14 days before significant changes take effect.

If you have questions about this Privacy Policy or how your data is handled: