Privacy Policy.

01Who is responsible

For your own account details, ChatPebble decides how that information is used.

For your customers' messages and details, your business is in charge. We process that information on your behalf, only to provide the service to you.

02What we collect

• Account details: your name, email, password (stored encrypted) and phone number.
• Business details: your business name, category, WhatsApp number, products, prices and stock.
• Customer chats: messages, names and phone numbers of people who message your business, and the orders they place.
• Payment details: handled by our payment provider. We never see or store your full card number.
• Usage information: how the dashboard is used, device and browser type, and error logs, to keep the service working.

03How we use it

• to run ChatPebble: send and receive WhatsApp messages, write replies, record orders and show reports;
• to bill you and send receipts and service messages;
• to keep accounts secure and prevent misuse;
• to fix problems and improve the product;
• to meet legal obligations.

We do not sell your information or your customers' information, and we do not use it for advertising.

04AI processing

To write replies, relevant parts of a conversation and your product details are sent to our AI provider. They are used only to create the reply and are not used to train public AI models.

05Who we share it with

We share information only with providers that help us run the service, under contracts that protect it:

• Meta (WhatsApp), to send and receive messages;
• our hosting and storage providers;
• our AI provider, to write replies;
• our payment provider, to process payments.

We may also share information if the law requires it, or to protect people's safety.

06International transfers

Some of our providers store or process data outside Sri Lanka. When that happens, we make sure the information is protected to the standard required by Sri Lankan law.

07How long we keep it

We keep your information while your account is open. When you close it, we delete it within 90 days, except records we must keep by law, such as invoices.

08Security

Data is encrypted in transit and at rest, access is limited to the people who need it, and passwords are never stored in plain text. No system is completely secure, but we work to protect your information and will tell you promptly if a breach affects you.

09Your rights

Under the Personal Data Protection Act you can ask to:

• see the information we hold about you;
• correct information that is wrong;
• have your information deleted;
• object to or limit how we use it;
• get a copy of your data to take elsewhere.

Email hello@chatpebble.lk and we will reply within 21 days. If your customers ask about their data, we will help you respond.

10Cookies

We use only the cookies and local storage needed to keep you signed in and remember preferences like your theme. We do not use advertising cookies.

11Children

ChatPebble is for businesses and is not meant for anyone under 18.

12Changes to this policy

If we make significant changes, we will tell you by email or in the dashboard before they take effect.

13Contact

For any privacy question or request, email hello@chatpebble.lk or write to us at No. 42, Galle Road, Colombo 03, Sri Lanka.