Privacy Policy

Chems Capital Limited (operating as "Chatship", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, process, and share your personal information when you use our website (chatship.com), our application, and our Instagram automation services (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy.

1. Information We Collect

We collect information about you in three primary ways: information you provide directly to us, information collected automatically, and information we receive from third-party platforms (like Meta).

A. Information You Provide to Us

• Account Information: When you register for a Chatship account, we collect your name, email address, and secure password hashes.
• Billing Information: If you subscribe to a paid tier, our third-party payment processors (e.g., Stripe) collect your billing address and credit card information. We do not store full credit card numbers on our servers.
• Communications: If you contact us for support, we collect your name, email, and the contents of your message.

B. Information from Third-Party Platforms (Meta / Instagram)

To provide our automation services, you must connect your Instagram Professional account to Chatship via Facebook Login. In doing so, we collect:

• OAuth Tokens: Secure access tokens that allow us to act on your behalf to read and reply to messages.
• Public Profile Data: Your Instagram username, profile picture, and account ID.
• Direct Messages & Comments: To trigger automated workflows, we process incoming Direct Messages (DMs), Story Replies, and Comments from your followers. Note: We only process messages necessary to fulfill your configured automation rules.

C. Automatically Collected Information

• Log and Usage Data: We automatically record diagnostic data, including your IP address, browser type, operating system, and how you interact with our Services.
• Cookies: We use cookies to keep you logged in and understand site traffic. You can instruct your browser to refuse all cookies, though some features of our Service may not function properly.

2. How We Use Your Information

We use the information we collect strictly to operate, maintain, and improve our Services. Specifically, we use your data to:

• Provide the Service: Process incoming Instagram messages and deploy automated replies based on the exact rules and AI prompts you configure.
• Maintain Security: Detect, prevent, and address technical issues, unauthorized access, and fraudulent activity.
• Communicate: Send you technical notices, updates, security alerts, and support messages.

3. How We Share Your Information

We do not sell your personal information. We only share your data under the following circumstances:

• Service Providers: We share information with trusted third-party vendors who provide cloud hosting (e.g., AWS, Supabase), payment processing (e.g., Stripe), and language model processing (e.g., OpenAI) necessary to operate our platform. These providers are bound by strict confidentiality agreements.
• Legal Requirements: We may disclose your information if required to do so by law, or in response to valid requests by public authorities (e.g., a court or government agency).
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your personal data may be transferred as a business asset.

4. Data Retention and Deletion

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. Active chat logs and automation metrics are stored to provide you with unified inbox capabilities and analytics.

You have the right to request the complete erasure of your data at any time. For detailed instructions on how to request data deletion, or what happens when you disconnect Chatship from your Facebook account, please review our strict Data Deletion Policy.

5. Your Privacy Rights (GDPR & CCPA)

Depending on your location (such as the European Economic Area or California), you have certain statutory rights regarding your personal data:

• The right to access: You can request copies of your personal data.
• The right to rectification: You can request that we correct any information you believe is inaccurate.
• The right to erasure: You can request that we erase your personal data, under certain conditions.
• The right to restrict processing: You can request that we restrict the processing of your personal data.
• The right to data portability: You can request that we transfer the data that we have collected to another organization, or directly to you.

To exercise any of these rights, please contact us at privacy@chatship.com. We have one month to respond to your request.

6. International Data Transfers

Your information, including Personal Data, is processed at our operating offices and in any other places where the parties involved in the processing are located (primarily the United States). This means your data may be transferred to and maintained on computers located outside of your state, province, or country. By using our Services, you consent to this transfer. We take all steps reasonably necessary to ensure your data is treated securely and in accordance with this Privacy Policy via Standard Contractual Clauses (SCCs).

7. Children's Privacy

Our Services are designed for businesses and creators and are not intended for use by anyone under the age of 16. We do not knowingly collect personally identifiable information from anyone under the age of 16. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers immediately.

8. Data Controller vs. Data Processor (GDPR)

In the context of European data protection laws (GDPR), the distinction between Data Controller and Data Processor is important:

• Data Controller: For your own account data (your email, billing info), Chems Capital Limited acts as the Data Controller.
• Data Processor: For the Instagram messages and subscriber data you process using our platform, you are the Data Controller and Chems Capital Limited acts solely as the Data Processor on your behalf. You are responsible for ensuring you have the appropriate consent from your Instagram followers to process their messages using third-party automation tools.

9. Security of Your Data

We prioritize the security of your data. All data transmitted between your browser, our servers, and Meta's Graph API is encrypted in transit using industry-standard TLS (Transport Layer Security). Data stored in our databases is encrypted at rest. While we strive to use commercially acceptable means to protect your Personal Data, no method of transmission over the Internet is 100% secure.

10. Contact Us

If you have any questions about this Privacy Policy, your data rights, or our security practices, please contact our Data Protection Officer at:

Email: privacy@chatship.com
Address: Chems Capital Limited Legal Department, [Insert Address]