compliance Policy

ChatExpert is built on a foundation of strict data compliance, enterprise encryption, and complete transparency. This policy outlines how we collect, process, and protect your information.

Domain: chatexpert.in • Last Updated: August 2026 • DPDP Act 2023 & GDPR Compliant

Our Core compliance Commitments

✓ Your Data is Never Sold

We do not sell, rent, or monetize your customer chat data or business contact lists to any third parties.

✓ No AI Training on Private Chats

Your customer messages and private conversations are never used to train public foundation AI models.

✓ AES-256 At-Rest Encryption

API keys, access tokens, and sensitive conversation records are encrypted using industrial-grade cryptography.

✓ Zernio WhatsApp business Platform

Messaging is delivered through the authorized Zernio WhatsApp business Platform with full end-to-end transport security.

1

Information We Collect

When you register and use the ChatExpert platform (accessible at chatexpert.in), we collect the following categories of data:

Account & business Information

  • • business owner name, company name, official email.
  • • WhatsApp business phone number & Zernio account identifiers.
  • • Billing details, GSTIN (for Indian businesses), and invoicing address.
  • • User authentication credentials and encrypted session tokens.

WhatsApp Conversation & Lead Data

  • • Inbound customer message text, button selections, and timestamps.
  • • Voice message transcripts (processed securely for intent detection).
  • • Booking scheduling slots, customer name, inquiry category, and triage notes.
  • • Delivery receipts and message read status events.
2

How We Use Your Information

We process your data strictly to deliver and maintain our SaaS communication services under standard contractual necessity:

WhatsApp Message Automation: Routing customer inquiries, generating contextual AI responses, triggering reminders, and processing lead captures.

Human Takeover & Alerts: Escalating high-intent or urgent professional/sales inquiries directly to business staff via real-time notifications.

Billing & Subscription Management: Managing recurring subscriptions, tax compliance (GST), and generating invoices via verified payment gateways (e.g. Razorpay/Stripe).

Platform Security & Fraud Prevention: Rate limiting, preventing spam broadcast abuse, and detecting unauthorized access attempts.

3

WhatsApp Data Processing

ChatExpert connects to WhatsApp through the Zernio WhatsApp business Platform, an authorized WhatsApp business Solution provider. By using ChatExpert, you acknowledge and agree that:

  • Message transmission between your customers and WhatsApp servers is subject to the WhatsApp business Terms of services and the applicable data processing terms of your messaging provider (Zernio).
  • You are the Data Controller of your customer conversations; ChatExpert operates as a Data Processor and Zernio as the messaging infrastructure provider.
  • You are responsible for obtaining appropriate opt-in consents from your customers prior to sending proactive notification messages via WhatsApp templates.
4

Data Security & Storage Architecture

We employ comprehensive technical and organizational measures to safeguard your information:

Encryption at Rest

Sensitive tokens and stored message logs are encrypted using AES-256 database encryption.

Encryption in Transit

All browser-to-server and server-to-messaging-provider API calls are transmitted over TLS 1.3 / HTTPS.

Row-Level Security (RLS)

Each tenant's business data is isolated in the database via cryptographic tenant scoping.

5

Your Rights (DPDP Act 2023 & GDPR)

As a ChatExpert user or enterprise customer, you retain the following statutory rights regarding your personal information:

Right to Access: Request a copy of your stored business profile and conversation logs.
Right to Rectification: Update inaccurate business, phone, or billing details instantly in your settings.
Right to Erasure (Deletion): Request complete account deletion and purge of all conversation history upon subscription termination.
Data Portability: Export your customers, leads, and analytics in CSV/JSON format at any time.

Grievance Redressal & compliance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act (DPDP), 2023, the details of our Grievance Officer are provided below:

Grievance Officer: Legal & Data Protection Desk

Brand / Platform: ChatExpert (chatexpert.in)

Email: legal@chatexpert.in or support@chatexpert.in

Address: Hyderabad, Telangana, India

Response Time: All compliance grievances are formally acknowledged within 24 business hours and resolved within 15 working days.