Privacy Policy.

01Who is responsible

For your own account details, ChatPebble decides how that information is used.

For your customers' messages and details, your business is in charge. We process that information on your behalf, only to provide the service to you.

02What we collect

• Account details: your name, email, password (stored encrypted) and phone number.
• Business details: your business name, category, WhatsApp number, products, prices and stock.
• Customer chats: messages, names and phone numbers of people who message your business, and the orders they place.
• Payment details: handled by our payment provider. We never see or store your full card number.
• Usage information: how the dashboard is used, device and browser type, and error logs, to keep the service working.
• Website visits: the pages you open on our website and where you came from (see Website visits and cookies below).

03Website visits and cookies

We use the cookies and local storage needed to keep you signed in and remember preferences like your theme. We do not use advertising cookies.

To see how people find and use our website, we count page views ourselves. We do not use Google Analytics or advertising trackers.

• For every page view we record the page, the site or campaign link you came from, your country and city (from your internet address), and your device type, browser and operating system.
• If you choose OK on the cookie notice, we also set one cookie that tells repeat visits apart (an encrypted random id, not your name) and keep your IP address and browser details.
• If you choose Decline, or don't answer, we set no cookie and keep no IP address; the visit is only counted.

IP addresses and browser details are deleted after 90 days; the counts are kept. To change your choice, clear this site's data in your browser and the notice will ask again.

04How we use it

• to run ChatPebble: send and receive WhatsApp messages, write replies, record orders and show reports;
• to bill you and send receipts and service messages;
• to keep accounts secure and prevent misuse;
• to fix problems and improve the product;
• to meet legal obligations.

We do not sell your information or your customers' information, and we do not use it for advertising.

05AI processing

To write replies, relevant parts of a conversation and your product details are sent to our AI provider. They are used only to create the reply and are not used to train public AI models.

06WhatsApp messages

ChatPebble sends and receives messages through the WhatsApp Business Platform (Cloud API), provided by Meta Platforms, Inc. Meta handles those messages under its own terms and privacy policy: https://www.whatsapp.com/legal/business-policy and https://www.facebook.com/privacy/policy.

• Businesses on ChatPebble may only message people who contacted them first or who agreed to receive their messages.
• Messages sent more than 24 hours after a customer's last message use templates approved by Meta.
• Anyone can stop receiving messages from a business by asking it to stop, or by blocking the number in WhatsApp.

We use message content only to deliver the service to the business you are talking to. We do not use it for advertising or share it with other businesses.

07Who we share it with

We share information only with providers that help us run the service, under contracts that protect it:

• Meta Platforms, Inc., through the WhatsApp Business Platform, to send and receive messages;
• our hosting and storage providers;
• our AI provider, to write replies;
• our payment provider, to process payments.

We may also share information if the law requires it, or to protect people's safety.

08International transfers

Some of our providers store or process data outside Sri Lanka. When that happens, we make sure the information is protected to the standard required by Sri Lankan law.

09How long we keep it

We keep your information while your account is open. When you close it, we delete it within 90 days, except records we must keep by law, such as invoices.

10Security

Data is encrypted in transit and at rest, access is limited to the people who need it, and passwords are never stored in plain text. No system is completely secure, but we work to protect your information and will tell you promptly if a breach affects you.

11Your rights

Under the Personal Data Protection Act you can ask to:

• see the information we hold about you;
• correct information that is wrong;
• have your information deleted;
• object to or limit how we use it;
• get a copy of your data to take elsewhere.

Email [email protected] and we will reply within 21 days. If your customers ask about their data, we will help you respond.

12Deleting your data

You can ask us to delete your data at any time:

• Business owners: close your account from the dashboard, or email [email protected] from the email address on your account and ask us to delete it.
• People who messaged a business on ChatPebble: ask that business to delete your chat, or email [email protected] with your WhatsApp number and the business you messaged.

We confirm the request within 7 days and delete the data within 30 days, except records we must keep by law, such as invoices.

13Children

ChatPebble is for businesses and is not meant for anyone under 18.

14Changes to this policy

If we make significant changes, we will tell you by email or in the dashboard before they take effect.

15Contact

For any privacy question or request, email [email protected] or write to us at ChatPebble, Colombo, Sri Lanka.