Privacy Policy

Welcome to ChatModel.in ("ChatModel", "we", "our", or "us"). We provide an enterprise-grade multi-tenant conversational AI platform enabling businesses to deploy dedicated 24/7 AI assistants on isolated subdomains, custom web widgets, and WhatsApp Business messaging channels. We take data protection, client privacy, user consent, and enterprise confidentiality extremely seriously, operating in compliance with India's Digital Personal Data Protection (DPDP) Act 2023 and international data protection standards.

1. Information We Collect

We only collect information necessary to operate, secure, and deliver conversational AI and messaging services:

• Account & Workspace Data: When administrators provision a workspace, we store the business name, assigned subdomain slug, brand configurations, theme accents, contact email, and hashed authentication credentials.
• WhatsApp Messaging Data: When end users interact with client assistants via WhatsApp, we process user phone numbers, WhatsApp profile display names, inbound and outbound chat messages, media/attachments, message timestamps, delivery statuses, and unique WhatsApp IDs.
• Web Conversation Logs: Messages and session identifiers exchanged with client AI assistants across web workspaces and embedded chat widgets.
• Inquiry & Lead Information: When prospective clients submit inquiries via our public portal, we capture contact details (name, email, phone, company, and project requirements) to fulfill commercial consultations.
• Technical Telemetry: Standard non-identifying server logs, including IP addresses, timestamps, and request headers to safeguard system availability, prevent DDoS attacks, and enforce rate limits.

2. How We Use Information

Information gathered is utilized strictly for:

• Provisioning and maintaining dedicated client workspace subdomains (e.g., client.chatmodel.in).
• Processing, interpreting, and responding to incoming user messages across WhatsApp and web chat interfaces in real time.
• Dispatching real-time HTTPS webhook requests to configured AI workflows (such as n8n, Make, Flowise, OpenAI, Anthropic, or internal client APIs).
• Monitoring conversation quota thresholds according to subscription plan tiers.
• Securing tenant portals against unauthorized access using CSRF defense, rate-limiting, and hashed credentials.
• We never sell, lease, rent, or trade your personal or conversational data to third parties, data brokers, or advertising networks.

3. WhatsApp Business API & Meta Platform Compliance

For WhatsApp integrations, ChatModel operates in full compliance with the Meta Developer Terms and WhatsApp Business Messaging Policy:

• Transmission via Official APIs: WhatsApp messages are securely routed through Meta's official WhatsApp Business Platform (Cloud API / On-Premises API).
• No Reselling or Data Harvesting: We do not sell, rent, or monetize WhatsApp user phone numbers, message content, or conversation histories.
• Strict Purpose Limitation: WhatsApp user data is processed solely to facilitate two-way communication between end users and the client's automated AI assistant or human support agents.

4. User Consent, Opt-In & WhatsApp Opt-Out

We respect user autonomy and communication preferences across all channels:

• Opt-In & Triggering: Conversations via WhatsApp are initiated either directly by the user (user-initiated session) or through explicit, compliant business opt-in mechanisms as governed by WhatsApp policies.
• Opt-Out: WhatsApp users can opt out of receiving further automated messages at any time by simply sending STOP, UNSUBSCRIBE, QUIT, or requesting support agent handover. Upon receipt of an opt-out keyword, automated messaging is promptly suspended for that phone number.

5. Multi-Tenant Data Isolation & Security

Every client workspace operates under strict isolation boundaries. We enforce:

• No-Index Search Engine Exclusion: Client workspaces and conversation records are guarded with noindex, nofollow, and X-Robots-Tag directives to ensure search engines never scrape or index private client interactions.
• Access Control Modes: Workspaces can be switched between Public (unauthenticated) and Private (passcode/credential gated) modes to prevent unauthorized conversation access.
• Automated SSL/TLS Encryption: All data in transit across web portals, WhatsApp webhooks, and AI integrations is encrypted using modern 256-bit TLS protocols.

6. Third-Party Webhooks & AI Model Processors

ChatModel dispatches user prompts to client-defined webhook endpoints and AI foundation models. Clients maintain full ownership and governance over their downstream data pipelines. Conversational data processed through our orchestration layer is never used to train public language models.

7. Cookies & Local Storage

We use localized session cookies and browser storage strictly for essential operations, such as keeping administrators logged into the portal, validating CSRF security tokens, and remembering Day/Night visual theme preferences. We do not use third-party cross-site tracking or behavioral advertising cookies.

8. Data Deletion Instructions (Meta & User Data Erasure)

9. Data Retention & Web Update Log Disclaimers

Administrators and users have the right to request full erasure of their workspace and chat records:

• When an administrator deletes a tenant workspace from the Admin Console, all associated database records and session logs are permanently expunged.
• Missed Chats During Web Updates & Deployments: During ongoing web platform updates, server maintenance, software releases, or network interruptions, transient chat sessions or messages sent across the web interface may occasionally be interrupted or unrecorded. Any chat messages or conversation data lost or missed during a web update cannot be recovered, reconstructed, or claimed from server logs. ChatModel does not guarantee persistent log retention or recovery for transient sessions occurring during maintenance or update windows, and users/clients agree that no claims, disputes, or compensation can be made regarding unrecorded or missing chat logs.

10. AI-Generated Output & Non-Liability Disclaimer

Artificial Intelligence can make mistakes, hallucinate, or generate inaccurate responses. ChatModel provides software infrastructure and orchestration bridges to third-party artificial intelligence engines and client-configured automation webhooks.

ChatModel, its founders, and operators do not assume any legal responsibility or liability for any incorrect statements, erroneous guidance, commitments, pricing quotes, or actions generated by the AI assistant over WhatsApp or web widgets. Users and clients must verify all critical, financial, legal, or medical information independently.

11. Age Limitation & Children's Privacy (18+ Only)

ChatModel is exclusively intended for commercial enterprises, business professionals, and individuals who are at least 18 years of age (or the age of majority in your jurisdiction). We do not knowingly solicit, collect, or process personal data from children under 18. If you believe a minor has provided us with personal data, please contact us immediately for prompt deletion.

12. Indian DPDP Act 2023 Compliance & User Rights

Under the Digital Personal Data Protection Act 2023 (DPDP Act), Indian citizens and users enjoy specific rights regarding their personal data, including the Right to Access information, the Right to Correction and Erasure, the Right to Nominate, and the Right to Grievance Redressal.

13. Grievance Officer & Data Protection Contacts