Privacy Policy
This Privacy Policy explains how Chattea collects, uses, and protects your personal information when you use our business messaging platform that integrates with WhatsApp accounts.
Last updated: September 19, 2025
Chattea ("we", "our", or "us") is committed to protecting your privacy and ensuring transparency about how we handle your personal information. This Privacy Policy applies to all users of our business messaging platform that helps you manage multiple WhatsApp accounts, including both cloud and desktop versions.
We are committed to complying with applicable data protection laws, including GDPR for European users and other regional privacy regulations. For users under 13 years of age, we require parental consent before collecting any personal information.
Personal Information
- Email address for account creation and communication
- Username and display name for account identification
- WhatsApp account identifiers (JIDs) for connecting your existing accounts
- Payment information processed securely through Midtrans payment gateway
Device and Technical Information
- IP address for security and geographic targeting
- Device type and operating system information
- Browser type and version for compatibility
- Session tokens and authentication data
Usage Data
- Message content, recipient phone numbers, and delivery timestamps
- Instance management, contact lists, and messaging activity
- Connection logs and technical diagnostic data
- Task completion status and processing statistics
- Provide and maintain our business messaging platform and WhatsApp integration services
- Authenticate users and manage account security
- Process payments and manage subscriptions through Midtrans
- Analyze usage patterns to improve our platform and features
- Provide customer support and troubleshoot technical issues
- Comply with legal obligations and protect against fraud
We do not sell, trade, or rent your personal information to third parties. We only share information in the following limited circumstances:
Limited Sharing Exceptions
- With Midtrans payment gateway for subscription processing
- With AWS S3-compatible storage for file and media storage
- When required by law or to protect our legal rights
- In case of business merger, acquisition, or asset sale
We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.
Security Measures
- Password hashing using bcrypt, HTTPS for data transmission
- JWT authentication with HttpOnly cookies and role-based permissions
- PostgreSQL database with authenticated access and CORS protection
- Regular security monitoring and access control reviews
We retain your personal information only as long as necessary to provide our services and comply with legal obligations.
Retention Periods
- Account data is retained while your account is active and deleted when you close your account
- Payment records are retained for 10 years as required by Indonesian financial regulations
- Message and activity logs are retained as long as your account is active
- WhatsApp session data is automatically deleted when you disconnect an instance
Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13 without verifiable parental consent.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can remove such information from our systems.
You have the following rights regarding your personal information:
- Access and receive a copy of your personal data
- Correct inaccurate or incomplete personal information
- Delete your personal information (right to be forgotten)
- Export your data in a machine-readable format
- Restrict the processing of your personal information
- Withdraw consent for data processing activities
We use cookies and similar tracking technologies to enhance your experience and improve our services.
Types of Cookies
- Essential cookies for authentication and basic functionality
- Authentication tokens to maintain your login session
- User preference cookies to remember your settings
- Analytics cookies to understand usage patterns (anonymized)
Our platform integrates with several third-party services to provide comprehensive functionality:
Third-Party Integrations
- Midtrans payment gateway for subscription processing (Indonesian payment provider)
- AWS S3-compatible storage for uploaded files and media attachments
- WhatsApp servers via whatsmeow library (unofficial client library) for business messaging
- privacy.thirdPartyServices.list.analytics
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Your continued use of our services after any changes constitutes acceptance of the updated Privacy Policy.
If you have any questions about this Privacy Policy or our data practices, please contact us:
We will respond to your inquiry within 72 hours and work to resolve any concerns you may have about your privacy.
If you want to permanently delete your Chattea account and all your data, visit our dedicated account deletion page for step-by-step instructions.
Account Deletion Instructions