Privacy Policy
1. Who we are
IP Ivanov Vladislav Alexandrovich (sole trader, Russia) operates chat-valet.com — a SaaS messaging tool for WhatsApp, Telegram and MAX. Contact for privacy matters: support@chat-valet.com.
2. Data we collect about you
| Data | Why we collect it | Legal basis |
|---|---|---|
| Email address | Account registration, login, notifications | Contract |
| Name (optional) | Personalising the interface | Contract |
| Messenger account phone numbers | Connecting WhatsApp, Telegram, MAX to the service | Contract |
| IP address, user-agent, session timestamps | Security and fraud prevention | Legitimate interest |
| Payment data | Processing payments — handled by the payment provider; we do not store card numbers | Contract |
| Session cookie (refresh token) | Keeping you logged in to the dashboard | Contract |
| Usage history: broadcasts, settings, token balance | Running the service, support, dispute resolution | Contract |
3. Your contacts' data — the important bit
Because the service works through your personal messenger accounts, we process data belonging to the people you communicate with. This includes:
- Phone numbers and names of contacts you upload for broadcasts
- Message content from conversations you connect for the AI assistant or unified inbox
- Message metadata: timestamps, delivery status, sender name
3.1. You are the controller; we are the processor
In relation to your contacts' data:
- You are the data controller — you decide why and how their data is used
- We are the data processor — we process their data only on your instructions and only for the purposes you set
- We do not use your contacts' data for our own purposes
4. Data transfers to AI providers
When you use the AI assistant, parts of your conversation history are sent to third-party AI providers. These are international data transfers — the providers' servers are outside Russia.
| Provider | Country | What is sent |
|---|---|---|
| OpenAI | USA | Message fragments to generate a reply |
| Anthropic | USA | Message fragments to generate a reply |
| DeepSeek | China | Message fragments to generate a reply |
| Google (Gemini) | USA | Message fragments to generate a reply |
You choose the AI provider in your account settings. Data is only sent when you actively use the AI feature, not in the background. Providers process data under their own privacy policies — we recommend reading them.
If you process data of EU residents, you remain responsible for ensuring an appropriate legal basis for these transfers under GDPR, such as Standard Contractual Clauses.
5. Other recipients of your data
- Payment processors — only what is needed to complete a transaction
- AI providers — only when you use the AI assistant (see section 4)
- Hosting providers — under data processing agreements with confidentiality obligations
- Law enforcement or regulatory authorities — when required by law
We do not sell your data to anyone.
6. How long we keep data
| Data | Retention period |
|---|---|
| Account data (email, settings) | Until account deletion + 30 days (for recovery) |
| Broadcast contacts, conversation content | Until account deletion or earlier on request |
| Operation logs | 1 year |
| Payment records | 5 years (tax law requirement — cannot be deleted on request) |
7. Security
- All connections use HTTPS/TLS encryption
- Messenger account keys are stored encrypted
- Session token stored in an HttpOnly, Secure cookie
- Passwords are hashed with a cryptographic algorithm
- Access to data is limited to those who need it
8. Cookies
We use only one technical cookie (refresh token) to keep you logged in. No analytics or advertising trackers. Page views are counted by our own cookieless counter that stores only daily totals per page and referrer source — it cannot identify visitors. See our Cookie Policy for details.
9. Your rights
Depending on where you are located, you may have the following rights:
| Right | What it means |
|---|---|
| Access | Get a copy of the personal data we hold about you |
| Rectification | Ask us to correct inaccurate data |
| Erasure | Ask us to delete your data (subject to legal retention requirements) |
| Portability | Receive your data in a structured, machine-readable format |
| Objection | Object to processing based on legitimate interest |
| Restriction | Ask us to limit processing in certain circumstances |
| Withdraw consent | Withdraw consent at any time where processing is based on consent |
To exercise any of these rights, email support@chat-valet.com. We will respond within 30 days.
If you are in the EU/EEA and believe we are handling your data unlawfully, you have the right to lodge a complaint with your local data protection authority.
10. Changes to this Policy
When we make significant changes to this Policy, we will notify you by email before the changes take effect. The effective date at the top of this page always shows the current version.
11. Contact
Privacy questions: support@chat-valet.com · https://chat-valet.com