Privacy Policy

Last updated 17 October 2026

This policy explains what personal data ChatAutomater (“we”, “us”) collects, why, who it is shared with, and the rights you have. ChatAutomater is operated by Rakshit Kumar, Main Road, Auchandi, Delhi - 110039, India. ChatAutomater provides automation and conversation tools for Instagram, Facebook, WhatsApp, X / Twitter and Telegram. By using the service you agree to this policy.

1. Our role

For your own account data (sign-in, billing, workspace settings) we are the data fiduciary / controller. For the data of people who message your connected accounts (your followers, customers and leads), you decide why and how it is used and we process it on your behalf as a data processor. You are responsible for having a lawful basis, and any notices or consents required, to message those people.

2. Information we collect

• Account data: when you sign in with Google, your Google account identifier, name, email address, profile image and session information.
• Connected channel data: identifiers of the Instagram, Facebook Page, WhatsApp business number, X or Telegram bot you authorize, plus access credentials, which are encrypted at rest.
• Conversation data: comments, mentions, story replies and messages sent to your connected accounts, sender identifiers and usernames, contact tags, the replies we send, delivery status, and any email address or phone number a person submits in a workflow you build.
• Workspace content: automation rules, message templates and business knowledge you save.
• Billing data: your plan, subscription and payment identifiers and status. Card, UPI and bank details are collected and held by Razorpay; we never see or store them.
• Technical data: IP address, browser type and request logs generated by our hosting provider for security and reliability.

3. How we use information

• to authenticate you and operate your workspace;
• to run the automations you configure and send eligible replies via the provider;
• to show conversations, contacts and delivery history;
• to provide subscriptions, process payments and prevent fraud or abuse;
• to secure, debug and improve the service and to comply with law;
• to respond to support and privacy requests.

We do not sell personal data, and we do not use conversation data to train AI models or for advertising.

4. Legal basis

We process data to perform our contract with you, with your consent where you give it (for example when you authorize a channel or enable AI replies), for our legitimate interests in security and service improvement, and to meet legal obligations. Where the Digital Personal Data Protection Act, 2023 (India) applies, we rely on your consent or on the legitimate uses it permits.

5. Service providers and sharing

We share data only as needed to run the service:

We may also disclose information if required by law or to protect rights, safety or the integrity of the service, or in connection with a merger or sale of the business, subject to this policy.

6. International transfers

Our providers operate data centres in several countries, so your data may be processed outside your country of residence, including outside India. Where required, we rely on appropriate safeguards such as the provider’s contractual commitments.

7. Retention

Instagram webhook event records are kept for up to 90 days and rate-limit reservations for up to two days. Other contacts, messages, automations and delivery history remain until you delete them, disconnect the associated account, or delete your workspace. Billing records are retained as long as required for tax, accounting and legal purposes. Backups held by our hosting and database providers expire on their normal schedules.

8. Security

Channel access credentials are encrypted at rest, traffic uses TLS, webhooks are signature verified, and workspace data is scoped to your account. No system is perfectly secure; if we become aware of a personal data breach affecting you we will notify you and the relevant authority as the law requires.

9. Your rights

Subject to applicable law (including the DPDP Act 2023, and where relevant the GDPR/UK GDPR and CCPA/CPRA) you may: access your data; correct or update it; delete it; withdraw consent; export it; object to or restrict certain processing; nominate someone to exercise your rights; and lodge a complaint with a supervisory authority. You can export contacts and delete your workspace yourself in Settings, and disconnect any channel in Channels. See data deletion instructions. Otherwise email rkstsuku@gmail.com and we will respond within 30 days (or sooner where the law requires). We do not discriminate against anyone for exercising their rights.

If you messaged one of our customers (for example a business using ChatAutomater), that business controls your conversation data. Please contact them first; we will also assist with verified requests. You can opt out of automated replies at any time by sending STOP or UNSUBSCRIBE.

10. Children

The service is for businesses and adults. It is not directed to anyone under 18 (or the age of majority where you live), and we do not knowingly collect their data. If you believe a child’s data has been provided to us, contact us and we will delete it.

11. Cookies

We use only strictly necessary cookies for sign-in and security. See the Cookie Policy.

12. Changes

We may update this policy. The “last updated” date above shows the current version, and we will give notice of material changes in the app or by email.

13. Contact and grievance officer

Questions, requests and complaints: rkstsuku@gmail.com. Grievance Officer: Rakshit Kumar, email rkstsuku@gmail.com. See also the Contact page.