1. Introduction

Chattalyst ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

2. Information We Collect

We may collect the following types of information:

Personal Information: Name, email address, phone number, and company name when you fill out forms or contact us.
Usage Data: Pages visited, time spent on pages, browser type, device information, and IP address collected automatically through cookies and analytics tools.
Communication Data: Records of correspondence when you contact us via email, chat, or other channels.

3. How We Use Your Information

To provide, operate, and maintain our services.
To improve, personalise, and expand our services.
To communicate with you, including for customer support and marketing purposes.
To process transactions and send related information.
To detect and prevent fraud or other harmful activities.
To comply with legal obligations.

4. Google API Services & OAuth User Data Policy (Limited Use)

Chattalyst integrates with Google API Services to enable user authentication via Google Sign-In and optional productivity integrations such as Google Calendar for appointment booking.

Google User Data We Collect:

Google Profile Information: When you sign in to Chattalyst with Google, we receive your name, email address, language preference, and profile picture provided by Google OAuth.
Google Calendar Data (Optional): If you choose to connect your Google Calendar for automated appointment scheduling, we access your calendar availability and event details solely to check free/busy status and schedule confirmed appointments.

How We Use Google User Data:

To authenticate your identity and grant access to your Chattalyst Platform account.
To associate your profile with your workspace organization and team communications.
To create, update, or sync customer bookings with your connected Google Calendar.

Google Limited Use Requirements Disclosure:

Chattalyst's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data Protection & Restrictions:

No Sale of Data: We never sell Google user data to third parties.
No Advertising: We never use or transfer Google user data for serving ads, including retargeting, personalized, or interest-based advertising.
No AI Model Training: We do not use Google user data to train generalized artificial intelligence (AI) or machine learning (ML) foundation models.
Human Access Limitations: No human employees or contractors are permitted to read your Google user data unless you have given explicit consent, it is necessary for security investigations, or it is required by applicable law.

Revoking Access and Deletion:

You can revoke Chattalyst's access to your Google account at any time via your Google Security Settings (Third-party apps with account access). You may also request permanent deletion of your account and all associated Google user data by emailing [email protected].

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to monitor activity on our website and hold certain information. You can instruct your browser to refuse all cookies or indicate when a cookie is being sent. However, some parts of our service may not function properly without cookies.

We use Google Analytics 4 to understand how visitors use our marketing site (for example, pages viewed and button clicks). Google may process this data in accordance with its own policies. See Google's Privacy Policy. We configure analytics to anonymize IP addresses where supported and do not send form field contents or chat messages to Google Analytics.

6. Sharing of Information

We do not sell your personal information. We may share your data with:

Service Providers: Third-party vendors who assist us in operating our website and services (e.g., hosting, analytics, email delivery).
Legal Requirements: When required by law, regulation, or legal process.
Business Transfers: In connection with a merger, acquisition, or sale of assets.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

8. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

Access, correct, or delete your personal data.
Object to or restrict processing of your data.
Request data portability.
Withdraw consent at any time.

To exercise any of these rights, please contact us at [email protected].

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].