1. Introduction
Cahyo Technologies ("Company", "we", "us") operates Cahyo Chat, a multi-channel customer messaging platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
2.1 Account Information
- Name, email address, and password
- Company name and portal (workspace) information
- Billing information (processed by Stripe — we do not store card details)
2.2 Messaging Data
- Messages sent and received through connected channels (WhatsApp, Messenger, Instagram, TikTok)
- Contact information of your customers (names, phone numbers, usernames)
- Media files (images, videos, documents) shared in conversations
- Call recordings (when enabled by you with consent)
2.3 Usage Data
- Log data (IP address, browser type, pages visited)
- Feature usage and interaction patterns
- Performance and error data
3. How We Use Your Information
- To provide, maintain, and improve the Service
- To process and deliver messages across connected platforms
- To manage your account and subscription
- To send service-related notifications
- To provide customer support
- To detect and prevent fraud or abuse
- To comply with legal obligations
4. Data Storage & Security
Your data is stored on secure servers. We use industry-standard security measures including:
- Encryption in transit (TLS/SSL) and at rest
- Schema-based data isolation between workspaces (tenants)
- Access tokens and OAuth credentials stored encrypted
- Regular security audits and monitoring
- Media files stored on Cloudflare R2 with access controls
5. Data Sharing
We do not sell your data. We share information only in these cases:
- Messaging Platforms: Messages are transmitted to WhatsApp (Meta), Facebook, Instagram, and TikTok as required to deliver your messages
- Service Providers: We use trusted third parties for hosting, payment processing (Stripe), and infrastructure (Cloudflare)
- Integrations: When you connect HubSpot or other integrations, data flows to those services as configured by you
- Legal Requirements: We may disclose information when required by law or to protect our rights
6. Data Retention
We retain your data for as long as your account is active. Upon account deletion:
- Account data is deleted within 30 days
- Message data and media files are deleted within 90 days
- Billing records are retained as required by law
- Anonymized analytics data may be retained indefinitely
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data
- Export your data in a portable format
- Object to or restrict processing
- Withdraw consent
To exercise these rights, contact us at privacy@cahyo.chat.
8. Cookies
We use essential cookies for authentication and session management. We do not use third-party tracking cookies. You can disable cookies in your browser settings, but some features may not function properly.
9. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place for such transfers.
10. Children's Privacy
The Service is not intended for users under 18 years of age. We do not knowingly collect data from children.
11. EU/EEA Users
TikTok Business Messaging API does not process message content from users in the European Economic Area, Switzerland, or the UK, in compliance with local privacy regulations. We respect all applicable GDPR requirements for EU/EEA users.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes will be notified via email.
13. Contact Us
For privacy-related questions or requests: