Privacy Policy for ChatBridge

Effective Date: 22nd May, 2026

This Privacy Policy (“Policy”) describes how ChatBridge and its subsidiaries and affiliates (“we”, “us”, “our”) collect, use, disclose, and safeguard personal information when you visit chatbridge.algosmiths.com (the “Website”) or use our products and services. We are committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”) and the UK GDPR, to the extent each applies to you.

1

Who We Are (Data Controller)

For the purposes of the GDPR, the data controller responsible for your personal information is ChatBridge, operated by Algosmiths, with operations based in India. If you have any questions about this Policy, our data practices, or wish to exercise any of your rights, you can reach us at chatbridge@algosmiths.com.

2

Information We Collect

We collect personal information in three ways: information you provide directly, information we collect automatically when you use our Website, and information we receive from third parties.

a. Information you provide directly

This includes name, email address, phone number, company name, account credentials, billing details, the content of messages you send us through forms or live chat, and any other information you choose to share when you sign up, contact us, request a demo, or subscribe to a plan.

b. Information collected automatically

When you visit the Website, we and the third-party services we use may automatically collect: your IP address and approximate geographic location derived from it; browser type and version, operating system, device type, and screen resolution; pages visited, time spent on pages, referring URL and exit URL; clicks, scroll depth, and other interaction events; date and time of access; a coupon code cookie set when you arrive via a promotional link with a coupon_code query parameter (retained for 24 hours); and a language preference cookie storing your selected display language (retained for up to 1 year).

c. Information from third parties

We may receive information about you from identity providers (such as Google or Meta) if you sign in with them, payment processors that handle your transactions, visitor identification services that infer the company associated with your visit, and affiliate or referral partners.

3

How We Use Your Information and Legal Basis for Processing

Under the GDPR, we may only process your personal data when we have a lawful basis for doing so. We rely on the following legal bases for the purposes described below.

Performance of a contractArt. 6(1)(b)

to provide and maintain the Website and our services, manage your account, process payments, and respond to service-related requests.

ConsentArt. 6(1)(a)

to send marketing communications by email; and to set non-essential cookies for analytics and functional purposes.

Legitimate interestsArt. 6(1)(f)

to respond to your inquiries and provide customer support; to keep our Website secure and prevent fraud; to understand and improve our products; and to communicate with existing customers about products and services similar to those they already use. Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms, and you have the right to object at any time.

Legal obligationArt. 6(1)(c)

to comply with tax, accounting, regulatory, and other legal requirements applicable to our business.

Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

4

Cookies and Tracking Technologies

We use cookies, pixels, local storage, and similar technologies (collectively, “cookies”) to operate and improve our Website. In line with the GDPR and ePrivacy rules, we obtain your consent through a cookie banner before setting any non-essential cookies.

Strictly necessary

Required for the Website to function and cannot be disabled. They do not store personally identifiable information. Examples: language preference cookie (up to 1 year), coupon code cookie (24 hours), consent record in local storage.

Analytics

Help us understand how visitors use the Website so we can improve it. Loaded only after consent. Providers: Google Analytics 4.

Functional

Enable enhanced features such as live chat support. Loaded only after consent.

You can review and change your cookie preferences at any time via our Cookie Preferences page, or block/delete cookies through your browser settings.

5

Third-Party Service Providers

The following third-party service providers may receive personal data in connection with your use of our Website and Service.

Google LLCGoogle Analytics 4Analytics
Data:IP address, device and browser information, page views, interaction eventsLocation:United States
Razorpay Software Pvt. Ltd.RazorpayPayments
Data:Payment card details, billing address, transaction historyLocation:India
Meta Platforms, Inc.WhatsApp Business APICore Service
Data:Message content, phone numbers, delivery metadata, timestampsLocation:United States

We do not control the privacy practices of third parties listed above. Where these providers act as independent controllers, you should review their privacy policies for full details.

6

International Data Transfers

ChatBridge is established in India, and personal data we collect is processed and stored there. Several of our service providers are based in the United States or other jurisdictions outside the EEA, the United Kingdom, or Switzerland.

When personal data is transferred from the EEA, UK, or Switzerland to a country without an adequate level of data protection, we rely on appropriate safeguards permitted under Articles 45 and 46 of the GDPR — including the European Commission's Standard Contractual Clauses (SCCs), the EU–US Data Privacy Framework where applicable, or other lawful transfer mechanisms. You can request further information by emailing chatbridge@algosmiths.com.

7

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes in this Policy, unless a longer period is required by law.

  • Account data: duration of your account plus a reasonable period after closure for legal and dispute-resolution purposes.
  • Billing and transaction records: as required by applicable tax and accounting laws (typically up to seven years).
  • Marketing contact data: until you withdraw consent or unsubscribe.
  • Analytics data: per the tool's configured retention (e.g. Google Analytics 4 defaults to up to 14 months).
  • Cookie consent record: stored in your browser until you reset it.
  • WhatsApp message logs: retained for the period necessary to support your account activity and troubleshooting, after which they are deleted or anonymized.
  • Server and security logs: a short period for security monitoring and incident response.

When personal data is no longer required, we securely delete or anonymize it.

8

Information Sharing and Disclosure

ChatBridge does not sell or rent your personal data. We disclose personal data only in the following circumstances:

  • Service providers (data processors): Who process data on our behalf to operate the Website and deliver our services, bound by contractual obligations to safeguard your data.
  • Meta Platforms, Inc.: As the operator of the WhatsApp Business API, Meta processes message metadata and delivery data in accordance with their own policies when messages are sent or received through the platform.
  • Legal reasons: When disclosure is necessary to comply with a legal obligation, court order, or government request; to enforce our terms; or to protect the rights, property, or safety of ChatBridge, users, or the public.
  • Corporate transactions: Such as a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality and protection obligations.
  • With your consent: For any other purpose disclosed at the time of collection.
9

Your Rights Under the GDPR

If you are located in the EEA, the United Kingdom, or Switzerland, you have the following rights with respect to your personal data, subject to the conditions set out in the GDPR:

Right of accessArt. 15

Obtain confirmation of whether we process your personal data and receive a copy.

Right to rectificationArt. 16

Have inaccurate or incomplete personal data corrected without undue delay.

Right to erasureArt. 17

Have your personal data deleted when one of the conditions set out in the GDPR applies.

Right to restrictionArt. 18

Limit how we use your data in certain circumstances.

Right to data portabilityArt. 20

Receive your personal data in a structured, machine-readable format and transmit it to another controller.

Right to objectArt. 21

Object to processing based on legitimate interests, including profiling and direct marketing.

Right to withdraw consentArt. 7(3)

Withdraw consent at any time without affecting prior lawful processing.

Right to lodge a complaintArt. 77

With your local data protection supervisory authority if you believe we have infringed your rights.

To exercise any of these rights, email chatbridge@algosmiths.com. We will respond within one month, as required by Article 12 of the GDPR (extendable by two months for complex requests). We may need to verify your identity before fulfilling your request.

10

Automated Decision-Making and Profiling

We do not make automated decisions that produce legal effects concerning you or that significantly affect you in a similar manner. Google Analytics collects aggregated usage data to help us understand how the Website is used, but this does not constitute individual profiling for decision-making purposes.

You can opt out of analytics cookies at any time by rejecting them in our Cookie Preferences center, or by using the Google Analytics opt-out browser add-on.

11

Children's Privacy

Our Website and services are not directed to children under the age of 16, and we do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us at chatbridge@algosmiths.com and we will take steps to delete such information.

12

WhatsApp Business Data Processing

ChatBridge is a middleware platform that connects your business to the WhatsApp Business API operated by Meta Platforms, Inc. When you use ChatBridge to send or receive WhatsApp messages, we process message content and associated metadata (such as phone numbers, timestamps, and delivery status) on your behalf as a data processor under your instructions.

Your responsibilities as a data controller: When using ChatBridge to message your end users, you are the data controller responsible for those interactions. You must ensure you have a lawful basis to contact your users over WhatsApp, comply with Meta's WhatsApp Business messaging policies, and maintain your own privacy notice covering how you process your customers' data.

Meta's policies: All messages sent through the WhatsApp Business API are subject to Meta's terms of service and privacy policy in addition to this Policy. ChatBridge has no control over Meta's data practices.

We do not use the content of WhatsApp messages processed through your account for our own marketing or profiling purposes. Message data is processed solely to deliver the service you have requested.

13

Security

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by Articles 33 and 34 of the GDPR.

14

Your Account Information

You may request access to, correction of, or deletion of your account information by sending an email to chatbridge@algosmiths.com. Please note that some identification, billing, and contact information may need to be retained on our records for legal, accounting, or dispute-resolution purposes for the periods described in Section 7.

15

Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the Effective Date at the top of this Policy and, where appropriate, notify you through our Website, by email, or through other reasonable means.

Your continued use of the Website after such updates constitutes your acknowledgment of the revised Policy.

16

How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at chatbridge@algosmiths.com.