Privacy Policy

Privacy Policy

Introduction

ChatiWa ("ChatiWa") is a product owned, operated, maintained, and distributed by BrainGrid Digital ("BrainGrid Digital", "Company", "we", "our", or "us").

This Privacy Policy explains how we collect, use, disclose, store, transfer, and protect information when you access or use:

• ChatiWa.com

• ChatiWa web applications

• ChatiWa mobile applications

• APIs and integrations

• Customer support services

• Marketing and communication services

• Any related products, services, websites, or platforms operated by BrainGrid Digital

By accessing or using ChatiWa, you acknowledge that you have read and understood this Privacy Policy.

Scope of this Privacy Policy

This Privacy Policy applies to:

• Visitors of ChatiWa websites

• Registered users

• Customers and subscribers

• Trial users

• Business account holders

• Authorized account users

• API users

• Website visitors

• Individuals whose information is processed through our services

This Privacy Policy does not apply to:

• Third-party services

• Third-party websites

• Third-party integrations

• External payment processors

• Independent business activities of our customers

Information We Collect

Information You Provide Directly

We may collect:

• Full name

• Email address

• Phone number

• Company name

• Job title

• Billing address

• Tax information

• Payment-related information

• Support requests

• Communications with our team

• Survey responses

• Feedback submissions

• Account profile information

Account Information

When creating an account, we may collect:

• Username

• Login credentials

• Password hashes

• Authentication details

• Security preferences

• Language preferences

• Time zone preferences

Customer Data

When using ChatiWa, customers may upload or process:

• Contact information

• Customer records

• Phone numbers

• Message templates

• Marketing content

• Customer interactions

• Communication history

• Imported contact lists

• Campaign information

Such information is processed solely to provide requested services.

WhatsApp Business Data

When using WhatsApp-related services, we may process:

• Phone numbers

• WhatsApp identifiers

• Message content

• Media attachments

• Message status information

• Delivery reports

• Read receipts

• Template information

• Conversation history

• Messaging metadata

Payment Information

Payments may be processed through third-party payment providers.

We may receive:

• Payment status

• Transaction identifiers

• Subscription status

• Billing history

• Invoice information

We do not store complete payment card information on our servers unless explicitly stated.

Automatically Collected Information

We may automatically collect:

• IP addresses

• Browser information

• Device identifiers

• Operating system details

• Session information

• Log data

• Access times

• Clickstream data

• Geographic region

• Referral information

Cookies and Similar Technologies

We may use:

• Cookies

• Session cookies

• Persistent cookies

• Local storage

• Tracking pixels

• Analytics technologies

• Similar tracking technologies

How We Use Information

We may use information to:

• Provide services

• Operate the platform

• Create and manage accounts

• Process transactions

• Authenticate users

• Deliver customer support

• Improve platform performance

• Monitor service quality

• Prevent abuse

• Detect fraud

• Enforce policies

• Personalize experiences

• Send service notifications

• Communicate updates

• Conduct analytics

• Maintain security

• Comply with legal obligations

Shopify Integration

When a merchant chooses to connect their Shopify store to ChatiWa, we process Shopify data solely for the purpose of providing the merchant-authorized integration.

Depending on the permissions granted by the merchant, ChatiWa may access:

• Customer information (such as names, email addresses, phone numbers, and customer identifiers)

• Order information

• Product information

• Inventory information

• Store information

• Webhook events generated by Shopify

This information is processed only for the merchant workspace that authorized the integration.

ChatiWa uses Shopify data exclusively to:

• synchronize merchant-authorized customer information;

• match Shopify customers with ChatiWa contacts;

• provide customer support context;

• power merchant-configured automation workflows;

• facilitate WhatsApp communication initiated or configured by the merchant.

We do not sell Shopify customer data or use it for unrelated advertising or profiling.

Shopify Webhooks

ChatiWa receives Shopify webhook events only after a merchant installs and authorizes the Shopify application.

Webhook requests are authenticated using Shopify HMAC signature verification before processing.

Webhook data is processed solely to synchronize merchant-authorized information and execute merchant-configured workflows.

Merchant Ownership

Merchants remain the owners of the customer data processed through their connected Shopify stores.

ChatiWa acts as a service provider that processes such data only on behalf of the merchant and according to the merchant's instructions.

Shopify Disconnection

If a merchant disconnects or uninstalls the Shopify integration, ChatiWa stops processing Shopify data for that store.

Shopify credentials are revoked, removed, or invalidated according to our retention policy.

Protected Customer Data

Where merchants authorize Shopify access to protected customer data, ChatiWa processes only the minimum information necessary to provide merchant-requested functionality.

Protected customer data is never sold.

Protected customer data is used solely to:

• identify customers,

• synchronize customer records,

• provide support context,

• enable merchant-configured WhatsApp communication,

• execute merchant-authorized automation workflows.

Legal Basis for Processing

Where required by law, we process information based on:

• User consent

• Contractual necessity

• Legitimate business interests

• Legal obligations

• Protection of vital interests

• Public interest obligations

Data Processing Roles

Depending on the circumstances:

• BrainGrid Digital may act as a Data Controller.

• BrainGrid Digital may act as a Data Processor.

• Customers may act as Data Controllers for customer information they upload.

Customers are responsible for ensuring they have lawful grounds for processing information through ChatiWa.

Sharing and Disclosure of Information

We do not sell personal information.

We may share information with:

Service Providers

• Cloud hosting providers

• Infrastructure providers

• Analytics providers

• Customer support providers

• Monitoring providers

• Security providers

• Email delivery providers

• SMS providers

• Messaging providers

Payment Providers

We may share necessary billing information with:

• Payment gateways

• Payment processors

• Fraud prevention providers

Business Transfers

Information may be disclosed during:

• Mergers

• Acquisitions

• Asset sales

• Corporate restructuring

• Financing transactions

Legal Compliance

We may disclose information when required:

• By law

• By court order

• By government authority

• For law enforcement purposes

• To protect legal rights

• To prevent fraud

• To investigate violations

International Data Transfers

Information may be processed or stored in countries outside your jurisdiction.

By using our services, you acknowledge that information may be transferred internationally.

Where legally required, we implement appropriate safeguards to protect transferred information.

Data Retention

We retain information only for as long as reasonably necessary to:

• Provide services

• Maintain accounts

• Comply with legal obligations

• Resolve disputes

• Enforce agreements

• Protect business interests

Retention periods may vary depending on:

• Data type

• Legal requirements

• Operational needs

• Security considerations

Data Security

We implement commercially reasonable security measures, including:

• Access controls

• Encryption technologies

• Secure infrastructure

• Authentication mechanisms

• Monitoring systems

• Security auditing

• Backup systems

However:

• No system is completely secure.

• No transmission method is completely secure.

• We cannot guarantee absolute security.

User Rights

Subject to applicable law, users may have rights to:

• Access information

• Correct inaccurate information

• Request deletion

• Restrict processing

• Object to processing

• Request portability

• Withdraw consent

• Lodge complaints with regulators

Requests may be submitted through our support channels.

Customer Responsibilities

Customers using ChatiWa agree that they are responsible for:

• Obtaining necessary consents

• Providing required notices

• Maintaining lawful contact lists

• Complying with privacy laws

• Complying with anti-spam regulations

• Complying with WhatsApp policies

• Complying with local regulations

Customers remain solely responsible for content they send through the platform.

Marketing Communications

We may send:

• Service announcements

• Account notifications

• Security notifications

• Product updates

• Billing communications

Where permitted by law, we may also send:

• Promotional emails

• Marketing materials

• Product recommendations

Users may unsubscribe from marketing communications at any time.

Google Workspace Integrations

ChatiWa provides optional integrations with Google services, including Google Calendar and Google Sheets. These integrations are only activated when a user voluntarily connects their Google account and grants authorization through Google's OAuth consent process.

Google Calendar Data

When a user connects Google Calendar, ChatiWa may access calendar information that the user authorizes, including calendar metadata, calendar settings, event details, attendee information, availability information, and related scheduling data.

This information is used solely to provide user-requested functionality, including:

• Displaying and selecting available calendars

• Synchronizing calendar data

• Creating, updating, and deleting calendar events

• Checking availability and free/busy information

• Triggering and executing automation workflows

• Supporting reminders, scheduling, and related calendar features

Google Sheets Data

When a user connects Google Sheets, ChatiWa may access spreadsheet data from spreadsheets that the user explicitly authorizes or selects.

This information is used solely to provide user-requested functionality, including:

• Reading spreadsheet data

• Displaying spreadsheet previews

• Creating spreadsheets and worksheets

• Appending, updating, deleting, and looking up rows

• Synchronizing spreadsheet information

• Triggering and executing automation workflows

• Supporting integrations configured by the user

Google Drive File Access

ChatiWa may request limited Google Drive access through Google's file selection mechanisms to allow users to choose spreadsheets or other supported files.

Access is limited to files the user explicitly selects or creates through ChatiWa. ChatiWa does not browse, index, or inspect a user's entire Google Drive.

OAuth Credentials and Security

When a Google account is connected, ChatiWa may store OAuth access tokens and refresh tokens in encrypted storage to maintain the authorized connection and provide requested functionality.

OAuth credentials are protected using industry-standard security measures and are only used for the purposes authorized by the user.

Use and Sharing of Google User Data

Google user data is used solely to provide the functionality requested by the user and described in this Privacy Policy.

ChatiWa does not:

• Sell Google user data

• Use Google user data for advertising purposes

• Share Google user data with data brokers

• Use Google user data for unrelated purposes

Google user data may be processed only as necessary to provide the requested services, comply with legal obligations, protect our rights, or maintain the security and reliability of the platform.

AI and Machine Learning

Google Workspace data obtained through Google APIs is not used to develop, improve, or train generalized artificial intelligence or machine learning models.

Any processing of Google Workspace data is limited to providing user-requested functionality and automation features within ChatiWa.

Revoking Access

Users may disconnect Google integrations at any time through their ChatiWa account settings or through Google's security settings.

Upon disconnection, ChatiWa will no longer access Google data unless the user reconnects the integration and grants authorization again.

Google API Services Disclosure

ChatiWa's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you connect your Google account, ChatiWa may access Google Calendar, Google Sheets, and Google Drive files that you explicitly authorize.

Google user data is used only to provide the features requested by the user, including calendar synchronization, event management, spreadsheet operations, workflow automation, and integration functionality.

Google user data is not sold, shared with advertisers, or used for advertising purposes.

Google user data is not used to train generalized artificial intelligence or machine learning models.

Users may revoke Google account access at any time through their Google Account security settings or by disconnecting the integration within ChatiWa.

Meta Platform Data

When users connect Facebook Pages, Instagram Professional Accounts, WhatsApp Business Accounts, or Meta Business Accounts to ChatiWa, ChatiWa may access and process information authorized by the user through Meta's authorization process.

This may include account metadata, messages, comments, posts, engagement information, and business account information required to provide messaging, publishing, automation, analytics, and customer engagement features.

This information is used solely to provide user-requested functionality and is not sold or used for advertising purposes.

Users may disconnect Meta integrations at any time through ChatiWa settings.

Data Retention / Data Deletion

We retain personal information only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, enforce agreements, and maintain platform security.

OAuth tokens, integration data, logs, and customer communication records may be retained for operational, compliance, security, and audit purposes.

When accounts are deleted, associated personal information will be deleted or anonymized unless retention is required by applicable law.

Users may request deletion of their ChatiWa account and associated data by contacting support@chatiwa.com or by using account deletion features available within the platform.

After verification, personal information will be deleted or anonymized unless retention is required by law, security obligations, fraud prevention requirements, or legitimate business records.

Data Security

ChatiWa implements reasonable administrative, technical, and organizational safeguards to protect personal information against unauthorized access, disclosure, alteration, or destruction.

OAuth credentials, access tokens, and sensitive integration data are encrypted during transmission and at rest where applicable.

Access to customer data is restricted to authorized personnel who require such access to operate, maintain, or support the service.

Third-Party Services and Integrations

ChatiWa may integrate with third-party services.

Examples may include:

• WhatsApp Business Platform

• Meta services

• Payment providers

• CRM platforms

• Analytics tools

• Marketing tools

We are not responsible for the privacy practices of third-party services.

Users should review applicable third-party privacy policies.

Artificial Intelligence and Automated Processing

Certain features may utilize automated technologies or artificial intelligence.

Such technologies may be used for:

• Message assistance

• Workflow automation

• Analytics

• Recommendations

• Customer support enhancements

Users remain responsible for reviewing and approving content before distribution.

Children's Privacy

ChatiWa is intended for business and professional use.

Our services are not directed to individuals under 18 years of age.

We do not knowingly collect information from children.

If we become aware that information has been collected from a child, we may delete such information.

Account Termination and Deletion

Users may request account deletion.

Upon deletion:

• Access may be terminated

• Certain information may be removed

• Certain information may be retained where legally required

• Backup systems may temporarily retain information

Retention may continue for:

• Legal compliance

• Fraud prevention

• Security purposes

• Dispute resolution

California Privacy Rights

Where applicable, California residents may have rights regarding:

• Access to collected information

• Deletion requests

• Correction requests

• Information disclosure requirements

We do not sell personal information.

European Economic Area and United Kingdom Rights

Where applicable, individuals may have rights under:

• GDPR

• UK GDPR

• Related privacy regulations

Including rights concerning:

• Access

• Rectification

• Erasure

• Restriction

• Portability

• Objection

Limitation of Liability

To the maximum extent permitted by law:

• BrainGrid Digital is not responsible for customer misuse of the platform.

• BrainGrid Digital is not responsible for third-party actions.

• BrainGrid Digital cannot guarantee uninterrupted or error-free operation.

• BrainGrid Digital cannot guarantee absolute security of information.

Changes to this Privacy Policy

We may modify this Privacy Policy at any time.

Changes may be communicated through:

• Website notices

• Platform notifications

• Email communications

• Account announcements

Continued use of the Services after updates constitutes acceptance of the revised Privacy Policy.

Contact Information

For privacy-related questions, requests, or concerns:

*BrainGrid Digital*

• Product: ChatiWa

• Website: https://chatiwa.com

• Support Email: [support@chatiwa.com](mailto:support@chatiwa.com)

• Security Contact: security@chatiwa.com

• Privacy Contact: privacy@chatiwa.com

Acknowledgment

By accessing or using ChatiWa, you acknowledge that:

• You have read this Privacy Policy.

• You understand this Privacy Policy.

• You agree to the practices described in this Privacy Policy.

• You consent to the collection and processing of information as described herein.