Privacy Policy

Last Updated: October 31, 2025

1. Introduction

Welcome to Chatmo ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our omnichannel messaging platform and related services (collectively, the "Services").

By accessing or using our Services, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us, including:

  • Account Information: Name, email address, phone number, company name, and password when you create an account
  • Profile Information: Profile picture, job title, department, and other optional profile details
  • Payment Information: Billing address and payment method details (processed securely through our payment processors)
  • Communications: Messages, conversations, and content you send or receive through our platform
  • Customer Data: Contact information, conversation history, and metadata about your customers when you use our Services
  • Support Requests: Information you provide when contacting our customer support team

2.2 Information Collected Automatically

When you use our Services, we automatically collect:

  • Usage Data: Pages visited, features used, time spent, click patterns, and interaction data
  • Device Information: IP address, browser type, operating system, device identifiers, and mobile network information
  • Location Data: Approximate location based on IP address
  • Cookies and Tracking: Information collected through cookies, web beacons, and similar technologies
  • Performance Data: System performance, error reports, and diagnostic information

2.3 Information from Third Parties

We may receive information from:

  • Connected Channels: Data from WhatsApp, Instagram, Facebook Messenger, Telegram, and other platforms you connect
  • Integration Partners: Information from CRM systems, email providers, and other third-party services you integrate
  • Public Sources: Publicly available information to enhance our Services

3. How We Use Your Information

We use the collected information for the following purposes:

  • Service Delivery: Provide, maintain, and improve our omnichannel messaging platform
  • Account Management: Create and manage your account, authenticate users, and process transactions
  • AI Features: Train and improve our AI agents to provide better responses and automation
  • Communication: Send service updates, security alerts, and administrative messages
  • Customer Support: Respond to your inquiries and provide technical assistance
  • Analytics: Analyze usage patterns to improve features and user experience
  • Security: Detect, prevent, and address fraud, security issues, and technical problems
  • Marketing: Send promotional materials and product updates (with your consent)
  • Compliance: Comply with legal obligations and enforce our terms
  • Research: Conduct research and development to enhance our Services

4. How We Share Your Information

We may share your information with:

4.1 Service Providers

Third-party vendors who perform services on our behalf, including cloud hosting (AWS, Google Cloud), payment processing, email delivery, analytics, customer support tools, and AI/ML services. These providers are bound by confidentiality agreements.

4.2 Connected Platforms

Messaging platforms (WhatsApp, Instagram, Facebook, Telegram, etc.) when you connect these channels to our Services, subject to their respective privacy policies.

4.3 Business Transfers

In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

4.4 Legal Requirements

When required by law, legal process, litigation, or requests from governmental authorities, or to protect our rights, privacy, safety, or property.

4.5 With Your Consent

With your explicit consent for any other purpose.

Note: We do not sell your personal information to third parties.

5. Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption of data in transit using TLS/SSL protocols
  • Encryption of sensitive data at rest
  • Regular security audits and vulnerability assessments
  • Access controls and authentication mechanisms
  • Employee training on data protection and privacy
  • Incident response and breach notification procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

  • Provide our Services and maintain your account
  • Comply with legal obligations and resolve disputes
  • Enforce our agreements and protect our legal rights
  • Maintain business records and analytics

When you delete your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law or for legitimate business purposes.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

  • Access: Request access to the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Portability: Request a copy of your data in a structured, machine-readable format
  • Objection: Object to processing of your information for certain purposes
  • Restriction: Request restriction of processing in certain circumstances
  • Withdraw Consent: Withdraw consent for processing where consent is the legal basis
  • Opt-Out: Unsubscribe from marketing communications at any time

To exercise these rights, please contact us at support@chatmo.io. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information. Types of cookies we use:

  • Essential Cookies: Required for the Services to function properly (cannot be disabled)
  • Analytics Cookies: Help us understand how users interact with our Services
  • Preference Cookies: Remember your settings and preferences
  • Marketing Cookies: Track visitors across websites for advertising purposes

Cookie Control and Opt-Out

You have several options to control and manage cookies:

  • Browser Settings: Most browsers allow you to block or delete cookies through their settings. Visit your browser's help section for instructions.
  • Browser-Specific Instructions:
    • Chrome: Settings > Privacy and security > Cookies and other site data
    • Firefox: Settings > Privacy & Security > Cookies and Site Data
    • Safari: Preferences > Privacy > Manage Website Data
    • Edge: Settings > Cookies and site permissions
  • Do Not Track: We honor Do Not Track (DNT) browser signals where technically feasible.
  • Analytics Opt-Out: To opt out of Google Analytics tracking, visit Google Analytics Opt-out Browser Add-on
  • Marketing Opt-Out: You can opt out of interest-based advertising through industry opt-out tools such as:

Note: Blocking or deleting cookies may impact your ability to use certain features of our Services. Essential cookies cannot be disabled as they are necessary for the Services to function.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those in your country. We ensure appropriate safeguards are in place to protect your information, including Standard Contractual Clauses approved by regulatory authorities.

10. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete such information.

11. Third-Party Links and Services

Our Services may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

12. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

  • Right to lodge a complaint with a supervisory authority: You may file a complaint with the data protection authority in your country of residence, place of work, or where an alleged infringement occurred
  • Right to object to automated decision-making and profiling: You have the right not to be subject to decisions based solely on automated processing
  • Right to be informed about data breaches: We will notify you of data breaches affecting your personal data without undue delay
  • Right to data portability: Receive your data in a structured, commonly used, machine-readable format
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time

Legal Basis for Processing

We process your personal data under the following legal bases:

  • Consent: When you have given explicit consent for specific processing activities
  • Contract Performance: To provide the Services you have requested
  • Legal Obligations: To comply with applicable laws and regulations
  • Legitimate Interests: For our legitimate business interests, provided they do not override your rights
  • Vital Interests: To protect your life or that of another person

EU Supervisory Authorities

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with the supervisory authority in your country. A list of EU Data Protection Authorities can be found at: EDPB Member Authorities

For users in the UK, you can contact the Information Commissioner's Office (ICO) at ico.org.uk

13. CCPA Compliance (California Users)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information we collect, use, and disclose
  • Right to request deletion of personal information
  • Right to opt-out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising your privacy rights

To exercise these rights, email us at support@chatmo.io.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our Services after changes constitutes acceptance of the updated policy.

15. Data Protection Officer

We have designated a Data Protection Officer (DPO) to oversee our data protection practices and ensure compliance with applicable privacy laws. For any data protection inquiries, privacy concerns, or to exercise your rights under GDPR, CCPA, or other data protection regulations, please contact:

Data Protection Officer

Email: dpo@chatmo.io

For general support inquiries, please contact support@chatmo.io

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

PT CHATMO TEKNOLOGI INDONESIA

Jl. Palagan Tentara Pelajar KM 9.5 No.31 Ngetiran, Sariharjo

Kec. Ngaglik, Kab. Sleman

Daerah Istimewa Yogyakarta, Indonesia

Email: support@chatmo.io

Data Protection: dpo@chatmo.io