Privacy Policy

Last Updated: July 11, 2026

At ChatVerse ("we", "us", "our"), we are committed to protecting your privacy. This policy explains how we collect, use, store, and share your information when you use our AI-powered automation platform at chatverse.io (the "Service").

Google API Services Compliance

ChatVerse's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, selling to third parties, training general AI models, or determining creditworthiness.

1. Information We Collect

Account Information

When you create an account: email address, name, profile picture (via Supabase Auth or social login).

Platform Data (via OAuth)

When you connect third-party accounts, we access only the data required for features you enable:

Instagram / Meta

Profile info, posts, comments, direct messages, webhooks (comments and messaging fields). Used for automation triggers and AI responses.

Gmail

Email messages, drafts, labels, contacts. Used for reading, composing, sending, and organizing emails on your behalf.

Google Drive

Files, folders, metadata, sharing permissions. Used for file management and document access within workflows.

Google Sheets

Spreadsheet data, cell values, formulas. Used for data operations, report generation, and automated data entry.

Google Docs

Document content, formatting, metadata. Used for creating, editing, and managing documents.

Google Forms

Form structure, questions, responses. Used for creating forms and processing submissions.

Google Calendar

Events, schedules, attendees. Used for creating, updating, and managing calendar events.

Google Meet

Meeting links, scheduled meetings, participants. Used for creating and managing video meetings.

YouTube

Channel data, video metadata, analytics, comments. Used for performance analytics and content insights (read-only).

Profile information, post publishing. Used for sharing content and viewing profile data.

HubSpot

Contacts, companies, deals. Used for CRM management and lead tracking.

Notion

Pages, databases, workspace content. Used for content organization and note management.

GitHub

Repositories, code files, issues, pull requests. Used for repository management and code operations.

Email (SMTP/IMAP)

Email messages for Hostinger, Zoho, Outlook, Yahoo, or custom domain accounts. Credentials stored encrypted.

Telegram (Bot & Personal)

Bot messages, user messages, chat metadata, webhook events. Used for automated messaging, responding to incoming messages, and workflow triggers.

WhatsApp Business

Incoming messages, sender phone numbers, message content, webhook events. Used for automated replies, real-time message monitoring, and workflow triggers via the WhatsApp Business Cloud API.

Usage and Technical Data

Browser type, IP address, pages visited, feature usage patterns, error logs. Collected for service improvement and security.

Payment Data

Payment processing is handled by Razorpay. We store transaction IDs and plan details but never store card numbers or payment credentials.

2. How We Use Your Data

We use collected data exclusively to:

Provide and operate the automation features you enable
Execute actions on connected platforms on your behalf (send emails, post content, reply to comments, etc.)
Process AI queries using your system prompts and uploaded knowledge bases
Track credit/token consumption for billing purposes
Improve service reliability and performance
Communicate service updates, security alerts, and billing notifications
Prevent fraud and enforce our Terms of Service

We do NOT use your data for:

Selling or renting to third parties or data brokers
Serving advertisements or targeted marketing
Training general-purpose AI/ML models
Determining creditworthiness or for lending purposes
Any purpose unrelated to providing the Service to you

3. Data Sharing

We share your data only in these circumstances:

AI Processing: Queries are sent to OpenAI (GPT-4o-mini) for generating responses. Only the immediate context needed for the query is shared.
Platform APIs: Data is sent to connected platforms (Google, Meta, LinkedIn, Telegram, WhatsApp, GitHub, Notion, HubSpot, etc.) as required to execute your automations.
Infrastructure Providers: Hosting (VPS), database (Supabase), caching (Redis), vector search (Pinecone) - bound by confidentiality agreements.
Payment Processing: Razorpay processes payments; they receive only payment-related data.
Legal Requirements: When required by law, court order, or to protect rights and safety.

4. Data Storage and Security

All data in transit encrypted via TLS 1.2+
Data at rest encrypted (AES-256)
OAuth tokens stored in encrypted database (Supabase with service-role isolation)
Redis cache uses encrypted connections with auto-expiring keys
Row-Level Security (RLS) enforced at the database level
JWT-based authentication with token verification on every request
HMAC signature validation on all webhook payloads
Rate limiting on authentication and API endpoints

5. Data Retention & User Rights

Active accounts: Data retained while the account and features are active.
Disconnected platforms: Associated credentials and active webhooks deleted within 48 hours.
Account deletion: You can request full data purge anytime by contacting hello@chatverse.io.

6. Contact & Data Officer

For privacy questions, data requests, or compliance:

Email: hello@chatverse.io
Corporate: CHATVERSE TECHNOLOGIES PRIVATE LIMITED
Website: chatverse.io