Privacy Policy

Last updated: March 26, 2026

1. Introduction

This Privacy Policy describes how CHATLA SOFTWARE SERVICES - FZCO ("we", "us", or "our"), a UAE-registered company, collects, uses, and protects your information when you use chat·la, our conversational engagement platform that integrates with services like WhatsApp and Facebook Messenger.

We are committed to respecting your privacy and complying with applicable data protection laws, including the UAE Data Protection Law and applicable international standards.

2. Information We Collect

We collect the following categories of data:

a. Information You Provide

• Business contact details (name, email, phone, company)
• Connected platform credentials (e.g., WhatsApp Business profile, Facebook Messenger account)
• Customer messages (if processed via our platform APIs)
• Beta signup information (monthly app installs, company details)

b. Automatically Collected Information

• IP address and device/browser type
• Usage data and logs (API requests, message status)
• Authentication tokens and permission scopes from third-party platforms

c. Third-party Data

• WhatsApp or Facebook Messenger account information as authorized during login or API integration
• Mobile app event data you connect to our platform

3. How We Use Your Information

We process your data for:

• Operating and improving chat·la
• Enabling integrations with messaging platforms (e.g., WhatsApp API, Facebook Messenger)
• Providing customer support and service updates
• Ensuring security and abuse prevention
• Fulfilling legal obligations and platform compliance
• Managing beta program participation and communications

4. Legal Basis for Processing

We process your data based on:

• Your consent (e.g., when connecting your messaging platform account)
• Our contractual obligations (e.g., to deliver platform services)
• Our legitimate interests (e.g., fraud prevention, analytics)
• Legal compliance (e.g., UAE or international data protection laws)

5. Data Sharing

We do not sell your data. We may share your data with:

• Service providers (e.g., hosting, analytics, customer support tools)
• Meta Platforms, Inc., for WhatsApp platform integration and compliance
• Facebook Messenger for platform integration purposes
• Legal authorities when required

A list of subprocessors is available upon request.

6. Data Retention

We retain data only for as long as necessary to fulfill the purposes outlined in this policy or comply with legal obligations. You may request deletion at any time.

7. Security

We apply industry-standard technical and organizational measures to protect your data from loss, misuse, or unauthorized access.

8. International Transfers

As a UAE-based company, your data may be stored or processed outside your country. When we transfer data outside the UAE, we ensure appropriate safeguards are in place.

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction or deletion
• Object to or restrict processing
• Withdraw consent (where applicable)
• Lodge a complaint with a data protection authority

Contact us at [email protected] to exercise these rights.

10. Government and Legal Requests

We are committed to protecting the privacy of our users and handling personal data in compliance with applicable data protection laws. In the event of a request from a public authority regarding user data, we apply the following policies and processes:

a. Legal Review Requirement

Every request from public authorities for access to personal data is subject to a mandatory internal review to assess its legality, scope, and necessity before any action is taken.

b. Challenging Unlawful Requests

If a request is found to be unlawful or overbroad, we reserve the right to challenge the request through appropriate legal channels before any user data is disclosed.

c. Data Minimization

We follow a strict data minimization policy. Only the minimum amount of data necessary to comply with a lawful request is disclosed. Non-essential or unrelated data is withheld.

d. Documentation and Accountability

All requests from public authorities, as well as our responses, are documented internally. This includes:

• The authority making the request
• The legal basis cited
• The data requested
• The data disclosed (if any)
• The justification for disclosure or refusal

e. User Notification

Where not prohibited by law, and where appropriate, we may notify affected users about such requests and the information disclosed.

11. Cookies

We use cookies and similar technologies for login sessions and analytics. You can manage your cookie preferences through your browser settings.

12. Children's Privacy

chat·la is not intended for use by individuals under the age of 16. We do not knowingly collect data from children.