Privacy Policy

1. Scope of This Policy

This policy explains how YourChat processes personal data in connection with the public website https://yourchat.me/, the application dashboard https://app.yourchat.me/, customer accounts, support interactions, billing, analytics, security logs, and optional customer-enabled website tools such as forms or callback features.

This policy is intended to reflect the actual architecture of the service. In the standard redirect-to-messenger setup, YourChat generally provides visual buttons and interface elements and does not usually read or store the content of private messages exchanged between end users and customers inside third-party messengers.

2. Privacy Roles: Controller and Processor

For visitors of https://yourchat.me/ and users of customer accounts in https://app.yourchat.me/, YourChat acts as an independent controller for data processed for website operation, account administration, billing, support, analytics, and security.

For optional lead-capture, callback, or contact-form features that may be enabled by customers on their own websites, YourChat may act as a processor or subprocessor on behalf of the customer, depending on the specific configuration and contractual setup.

Where YourChat only provides redirect-based buttons that send users to Telegram, WhatsApp, Viber, or other third-party messengers, the content of messages exchanged after the redirect is generally not processed by YourChat as part of the standard service flow.

3. Data Sources and Data Categories

YourChat may process personal data from the following sources:

1. Visitors of https://yourchat.me/: IP address, device and browser data, cookie identifiers, analytics events, referral data, and information submitted through contact or signup forms on the YourChat website.
2. Customer account users: name, email address, login and authentication data, subscription records, billing information, support requests, and account activity logs.
3. End users interacting with customer-installed tools: data submitted through optional callback forms, contact widgets, or similar features, but only where such features are enabled by the customer and technically routed through the service.

4. Purposes, Legal Bases, Retention, Recipients, and Transfers

A. Visitors of https://yourchat.me/

• Purposes: website operation, security, analytics, abuse prevention, contact handling, and service promotion.
• Legal bases: legitimate interests, performance of pre-contractual steps, and consent where required.
• Retention: website logs and technical records are retained for limited rolling periods; marketing or form-related records are retained only as long as needed for the stated purpose.
• Recipients: hosting providers, analytics providers, email and communication tools, and security or monitoring providers.
• International transfers: may occur where third-party service providers are located outside the EEA or use infrastructure outside the EEA, subject to applicable safeguards where required.

B. Customer account users

• Purposes: account creation, authentication, subscription management, service delivery, billing, invoicing, support, fraud prevention, and service security.
• Legal bases: performance of a contract, compliance with legal obligations, and legitimate interests.
• Retention: account data is retained while the account remains active and for a limited period after closure where necessary for support, fraud prevention, or legal defense; billing records may be retained for statutory accounting or tax periods.
• Recipients: hosting providers, payment providers, email tools, support systems, and security or logging providers.
• International transfers: may occur if any supporting vendors operate outside the EEA or use international infrastructure.

C. End users of customer-installed forms or callback tools

• Purposes: transmitting the submitted request to the customer, operating the feature chosen by the customer, abuse prevention, and troubleshooting.
• Legal bases: processing on customer instructions where YourChat acts as processor or subprocessor, and legitimate interests for basic security and logging where applicable.
• Retention: lead or request data is retained only for the period necessary to provide the relevant functionality, troubleshoot incidents, or fulfill the customer's chosen configuration.
• Recipients: the relevant customer, hosting providers, and technical infrastructure or communication vendors strictly necessary to operate the feature.
• International transfers: may occur depending on the technical stack and vendor locations used for the relevant feature.

5. Cookies and Analytics

YourChat may use cookies, local storage, or similar technologies for strictly necessary website and account functions, security, session handling, preference storage, and analytics.

Where non-essential cookies or analytics technologies require consent under applicable law, such technologies should only be activated after the user has given valid consent through the applicable consent mechanism. Users may also manage cookies through browser settings, subject to technical limitations.

6. Categories of Recipients and Subprocessors

Depending on the relevant feature and infrastructure, YourChat may use service providers in the following categories:

• hosting and cloud infrastructure;
• email delivery and transactional communications;
• analytics and website statistics;
• error tracking, monitoring, and logging;
• customer support and communication tools;
• payment and billing providers;
• CRM or account-management tools, where applicable.

Such providers receive only the data necessary to perform their function and may act as processors, subprocessors, or independent controllers depending on the service they provide and the applicable legal relationship.

7. Security Measures

YourChat applies reasonable technical and organizational measures designed to protect personal data against unauthorized access, misuse, accidental loss, alteration, or disclosure.

• role-based or need-to-know access controls;
• encryption in transit where appropriate;
• authentication and access restriction measures;
• system logging and security monitoring;
• backup procedures and operational resilience measures.

8. Data Subject Rights

Subject to the conditions and limitations of applicable law, data subjects may have the right to:

• obtain access to personal data;
• request rectification of inaccurate data;
• request erasure of data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive data portability where applicable;
• withdraw consent where processing is based on consent;
• lodge a complaint with a competent supervisory authority.

9. Contact Point for Privacy Requests

Privacy-related requests may be submitted using the service contact details published on the website and legal pages. Requests should include enough information for verification and for the service to understand the specific request.

10. Retention Logic

• Account data: generally kept while the account is active and for a limited post-closure period where needed for security, support, dispute resolution, or legal defense.
• Billing data: retained for the period required by accounting, tax, and legal obligations.
• Support tickets and support correspondence: retained for a reasonable operational period and longer where necessary to resolve disputes or document service history.
• Lead or form data: retained only for the duration needed to provide the feature and maintain operational troubleshooting, subject to customer configuration and legal requirements.
• Logs and security records: retained for limited rolling periods, unless longer retention is necessary for incident investigation, fraud prevention, or legal compliance.

11. Final Notes

This policy may be updated from time to time to reflect technical, operational, or legal changes. The current version published on the website is the controlling version.