Privacy Policy

ChatyFunnel is the controller of personal data collected through its platform and website. If you need to contact us about data protection, you can write to us from the contact page.

• Account data: name, email, phone and company when you request information or create an account.
• Usage data: technical information about how you interact with the platform (pages visited, actions, device and browser).
• Communication data: messages exchanged with customers through the connected channels (WhatsApp, etc.).

We process your data to provide the contracted service, manage sign-up and support, improve the platform, send communications related to the service and comply with our legal obligations.

The legal basis for processing is the performance of the contract when you are a customer, your consent when you request information or subscribe to communications, and our legitimate interest in ensuring the security and continuous improvement of the service.

We keep your data while you maintain an active relationship with ChatyFunnel. When you stop being a customer, we will keep it blocked during the applicable legal periods and, after that, we will securely delete it.

We do not share your data with third parties unless legally required. To provide the service we may use technology providers (hosting, analytics, messaging) acting as data processors under contract and with the appropriate guarantees.

You can exercise the rights of access, rectification, deletion, opposition, limitation and portability at any time by writing to us from the contact page. If you consider your rights have not been respected, you can file a complaint with the competent supervisory authority.

We may update this policy to reflect legal changes or service improvements. We will publish the updated version on this same page indicating the date of the last revision.

We apply industry-standard technical and organizational measures to safeguard user data, including:

• Encryption of data in transit using HTTPS/TLS on all endpoints.
• Encryption of sensitive data at rest where applicable, using provider-managed keys.
• Secure authentication and authorization based on hashed credentials and short-lived session tokens.
• Access controls following least-privilege principles, enforced through role-based permissions and row-level security in our database.
• Hosting on hardened cloud infrastructure with physical and network security controls.
• Firewalls, continuous monitoring and audit logging to detect and respond to unauthorized access attempts.
• Regular security updates, dependency patching and vulnerability reviews.
• Automated backups and documented disaster recovery procedures.

When you connect a Google account to ChatyFunnel, we handle Google user data with the following commitments:

• We only request the Google OAuth scopes strictly necessary for the features you enable.
• Google user data is used solely to provide the functionality you have requested.
• We do not sell Google user data.
• We do not use Google user data for advertising purposes.
• We do not share Google user data with third parties, except with sub-processors strictly required to operate the service or when legally required to do so.
• Our use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We retain user data only for as long as it is necessary to provide the service or to meet legal, accounting or reporting obligations. You may request the deletion of your account and associated personal data at any time from the contact page. Once deletion is confirmed, data is securely erased from our production systems and removed from backups within the standard rotation period, unless retention is required by applicable law.

• Only authorized ChatyFunnel personnel can access user data, and only when strictly required to operate, support or secure the service.
• Access is restricted according to documented business need and role.
• Administrative access is authenticated with strong credentials, logged and monitored for anomalous activity.

To deliver the service we rely on trusted providers that act as data processors under contractual guarantees, including cloud hosting, database, email delivery, analytics and payment processing (for example providers such as Google Cloud, AWS, Supabase, Stripe or Cloudflare, where applicable). These providers maintain their own security certifications and safeguards, and are only allowed to process data as necessary to perform the contracted services.

We continuously monitor our systems for security incidents. If a data breach affecting personal information occurs, we will investigate promptly, contain the incident and notify affected users and the relevant supervisory authorities without undue delay, in accordance with applicable data protection laws.

Protecting user privacy and data security is a core priority for ChatyFunnel. We continuously review, test and improve our security practices, policies and infrastructure to keep user information safe and to remain aligned with the expectations of our users and with evolving regulatory requirements.