Privacy Policy

ChatExpert is built on a foundation of strict data privacy, enterprise encryption, and complete transparency. This policy outlines how we collect, process, and protect your information.

Domain: chatexpert.in • Last Updated: August 2026 • DPDP Act 2023 & GDPR Compliant

Our Core Privacy Commitments

✓ Your Data is Never Sold

We do not sell, rent, or monetize your customer chat data or business contact lists to any third parties.

✓ No AI Training on Private Chats

Your customer messages and private conversations are never used to train public foundation AI models.

✓ AES-256 At-Rest Encryption

API keys, access tokens, and sensitive conversation records are encrypted using industrial-grade cryptography.

✓ Official Meta Cloud API Architecture

We operate strictly through authorized WhatsApp Business API protocols with full end-to-end transport security.

1

Information We Collect

When you register and use the ChatExpert platform (accessible at chatexpert.in), we collect the following categories of data:

Account & Business Information

  • • Business owner name, clinic/company name, official email.
  • • WhatsApp Business phone number & Meta WABA IDs.
  • • Billing details, GSTIN (for Indian businesses), and invoicing address.
  • • User authentication credentials and encrypted session tokens.

WhatsApp Conversation & Lead Data

  • • Inbound customer/patient message text, button selections, and timestamps.
  • • Voice message transcripts (processed securely for intent detection).
  • • Appointment scheduling slots, patient name, inquiry category, and triage notes.
  • • Delivery receipts and message read status events.
2

How We Use Your Information

We process your data strictly to deliver and maintain our SaaS communication services under standard contractual necessity:

WhatsApp Message Automation: Routing customer inquiries, generating contextual AI responses, triggering reminders, and processing lead captures.

Human Takeover & Alerts: Escalating high-intent or urgent clinical/sales inquiries directly to clinic staff via real-time notifications.

Billing & Subscription Management: Managing recurring subscriptions, tax compliance (GST), and generating invoices via verified payment gateways (e.g. Razorpay/Stripe).

Platform Security & Fraud Prevention: Rate limiting, preventing spam broadcast abuse, and detecting unauthorized access attempts.

3

WhatsApp & Meta Data Processing

ChatExpert interfaces with the official WhatsApp Business Platform (Meta Cloud API). By using ChatExpert, you acknowledge and agree that:

  • Message transmission between your customers and WhatsApp servers is subject to Meta's WhatsApp Business Terms of Service and Data Processing Agreement.
  • You are the Data Controller of your customer conversations; ChatExpert operates as a Data Processor / Business Solution Provider.
  • You are responsible for obtaining appropriate opt-in consents from your customers prior to sending proactive notification messages via WhatsApp templates.
4

Data Security & Storage Architecture

We employ comprehensive technical and organizational measures to safeguard your information:

Encryption at Rest

Sensitive tokens and stored message logs are encrypted using AES-256 database encryption.

Encryption in Transit

All browser-to-server and server-to-Meta API calls are transmitted over TLS 1.3 / HTTPS.

Row-Level Security (RLS)

Each tenant’s clinic data is isolated in the database via cryptographic tenant scoping.

5

Your Rights (DPDP Act 2023 & GDPR)

As a ChatExpert user or enterprise customer, you retain the following statutory rights regarding your personal information:

Right to Access: Request a copy of your stored business profile and conversation logs.
Right to Rectification: Update inaccurate business, phone, or billing details instantly in your settings.
Right to Erasure (Deletion): Request complete account deletion and purge of all conversation history upon subscription termination.
Data Portability: Export your patients, leads, and analytics in CSV/JSON format at any time.

Grievance Redressal & Privacy Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act (DPDP), 2023, the details of our Grievance Officer are provided below:

Grievance Officer: Legal & Data Protection Desk

Brand / Platform: ChatExpert (chatexpert.in)

Email: legal@chatexpert.in or support@chatexpert.in

Address: Hyderabad, Telangana, India

Response Time: All privacy grievances are formally acknowledged within 24 business hours and resolved within 15 working days.