Chatoura Privacy Policy

Last updated: November 21, 2025

1. Introduction

Chatoura ("we", "our", "us") is a customer support automation platform provided by Zime Tech. We enable businesses to build and deploy chatbots across Facebook Messenger, Instagram, WhatsApp, Telegram, and website widgets — without coding or AI knowledge required.

We are committed to protecting the privacy of our customers and end-users. This Privacy Policy explains how Zime Tech (operating as Chatoura) collects, uses, stores, and protects information.

By using our platform, you agree to the practices described here.

2. What Data We Collect

We collect the following types of information to operate and improve our services:

A. Account Information (Customers)

  • Name
  • Email address
  • Business name
  • Payment information (processed via trusted third-party providers like Lemonsqueezy)
  • Login credentials (hashed & encrypted)

B. Usage Data & Cookies

  • Browser type, device, IP address
  • Pages visited on our dashboard
  • Cookies: We use cookies to maintain your session, remember your preferences, and track platform performance. You can control cookie settings via your browser, but disabling them may affect chatbot builder functionality.

C. Chatbot and Integration Data When you connect your communication channels (Messenger, WhatsApp, Telegram, Website), we may access:

  • Messages sent to your Page or number
  • Automated bot responses
  • User IDs, timestamps, and conversation metadata
  • Page ID, Page name, Page settings
  • WhatsApp Business information
  • Public profile data of admins who authorize integrations

This data is used only to deliver your chatbot service.

3. Meta / Facebook / Instagram Data Usage

When you connect a Facebook Page or Instagram Account to Chatoura, we require specific permissions to operate the chatbot. We access the following Platform Data:

  • Messaging Capabilities (Permissions: pages_messaging, instagram_manage_messages) Used to read incoming messages and send automated responses on your behalf.
  • Real-Time Updates (Permission: pages_manage_metadata) Used to receive immediate notifications (webhooks) when a user messages your Page, ensuring the bot replies instantly.
  • Account Linking (Permissions: pages_show_list, instagram_basic) Used solely to display a list of your Pages/Accounts so you can select which one to connect to Chatoura.
  • Admin Identification (Permission: public_profile) Used to identify the name of the admin authorizing the connection for security logs.

How we use Meta data We use this information strictly to:

  • Deliver automated responses and manage Page/Account integrations.
  • Provide analytics and performance dashboards.
  • We comply with the Meta Platform Terms and Developer Policies. We do not use conversation content for surveillance, to build user profiles for advertising, or for any purpose other than providing the chatbot functionality.

Deletion of Meta data You may disconnect your Page or Instagram account at any time from Chatoura's dashboard or Meta's settings. Upon disconnect, all related data is deleted according to our retention policy. We provide a callback URL for immediate data deletion requests in compliance with Meta's requirements.

4. WhatsApp, Telegram & Website Widget Data

When you connect WhatsApp or Telegram to Chatoura, we process:

  • Incoming messages
  • Outgoing bot responses
  • Phone numbers or user IDs
  • Conversation content & timestamps

This data is used to operate your chatbot and is not shared externally except for service delivery (e.g., cloud hosting providers).

5. Third-Party Processors

We use reputable third-party tools to run the platform. These providers only access data as needed to operate the service and are bound by strict confidentiality agreements.

Key sub-processors include:

  • Cloud Infrastructure: AWS, Supabase, Pinecone
  • AI Processing: OpenAI, Google Gemini
  • Payments: Lemonsqueezy

A full list of sub-processors is available upon request.

6. AI, LLMs, and RAG

Chatoura uses AI assistant models (including Retrieval-Augmented Generation) to generate responses.

We follow these strict data rules:

We DO NOT:

  • Train global AI models on your customer data.
  • Share your conversations with any 3rd-party AI company for their model training.
  • Use your private content in public datasets.

We DO:

  • Send text inputs securely to third-party LLM providers (e.g., OpenAI) solely to generate an answer.
  • Store knowledge base or FAQ content that you upload in a secure vector database isolated from other customers.

7. Data Storage & Retention

Your data is stored on cloud servers located in the EU or US, depending on infrastructure requirements. For users in the EEA, we ensure data transfers are protected by appropriate safeguards (Standard Contractual Clauses).

Retention rules:

  • Chat data: Kept as long as your chatbot is active to provide conversation history.
  • Account data: Maintained while your subscription is active.
  • Deleted accounts: All personal data is removed within 30–90 days of account deletion.
  • Meta integrations: Fully wiped immediately upon disconnect.

You may request data deletion at any time.

8. Data Rights

Depending on your region (GDPR, CCPA, etc.), you have the right to:

  • Access the data we hold
  • Correct or update your information
  • Request deletion
  • Export your data
  • Object to processing

Requests can be submitted to: [email protected]

9. Children's Data

Chatoura does not knowingly collect information from children under 13. If such data is discovered, we delete it immediately.

10. Security Measures

We implement strong safeguards including:

  • Encryption: Data is encrypted in transit (TLS 1.3) and at rest (AES-256).
  • Role-based access control
  • Rate limiting to prevent abuse
  • Domain allowlisting for the web widget
  • Continuous monitoring and auditing
  • Secure API design

11. How We Use Your Data

We use collected information to:

  • Operate your chatbots
  • Improve bot accuracy
  • Provide analytics
  • Deliver customer support
  • Prevent abuse or misuse
  • Enhance platform performance

We never sell your data to data brokers or advertisers.

12. Sharing of Data

We only share data with:

  • Infrastructure providers (hosting, databases)
  • Messaging API providers (Meta, WhatsApp Cloud API, Telegram)
  • Payment processors
  • Legal authorities when required by law

13. International Data Transfers

Your data may be processed in jurisdictions outside your country. We use standard contractual clauses and other safeguards to protect your information during international transfers.

14. Updates to This Policy

We may update this Privacy Policy periodically. The "Last updated" date will reflect the latest revision.

15. Contact Information

For any privacy requests, questions, or concerns, please contact us.

Chatoura (operated by Zime Tech) Office 8125, 4th Floor, Building 5 Tower 74, El Nozha Street Heliopolis, Cairo Egypt

Email: [email protected]

Website: chatoura.com