Privacy Policy

This Privacy Policy explains how ChatMakeee ("we", "us", "our") collects, uses, stores, and protects information when you use our chatbot builder and related services (the "Service"). ChatMakeee is operated by Mohammed Salman (sole proprietor). Please read it carefully. It describes the types of information we process, why we process it, and the choices you have.

ChatMakeee is designed to help businesses capture leads. We are the data processor for lead data collected through your chatbots, and you (our customer) are the data controller for that information.

Information you provide directly

• Account details — your name, email address, and password (or Google sign-in profile) when you register.
• Chatbot configuration — the questions, flows, services, availability, and settings you build in the Service.
• Payment information — processed by our third-party payment provider. We do not store full card numbers on our servers.

Information collected through your chatbots

• Lead data — names, emails, phone numbers, and answers visitors submit through the conversation flows you design.
• Booking details — appointment times, dates, and related notes.

Usage information

• Technical data such as IP address, browser type, and device information for security and performance.
• Analytics about how the Service is used, subject to your analytics settings.

• To provide, maintain, and improve the Service, including your chatbot builder and lead management features.
• To secure your account and the Service.
• To communicate with you about your account, billing, and product updates.
• To process payments and prevent fraud.
• To comply with legal obligations.

Where required by applicable law, our processing is based on one or more legal bases, including performance of a contract with you, our legitimate interests (such as operating and securing the Service), your consent where we obtain it, and compliance with legal obligations.

We do not sell your personal data or your lead data. We share information only in the following circumstances:

• With trusted third-party service providers who help us run the Service — for services such as authentication, cloud hosting, databases, payment processing, email delivery, analytics, and integrations. These providers may change over time as our infrastructure evolves. Examples include Supabase, Google (for sign-in), and Dodo Payments (for payment processing).
• Where required by law, regulation, or a valid legal request.
• If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Where we share information with service providers, we do so under appropriate confidentiality and data-processing obligations.

We use the following third-party sub-processors to operate the Service. Each is contractually bound to process data only on our behalf and in accordance with this Privacy Policy. This list may change — we will update it here as providers change.

• Supabase — authentication, user accounts, and cloud-hosted Postgres database (custodian of account and lead data).
• Dodo Payments — payment processing and subscription billing. Does not receive chatbot lead data.
• Resend — transactional email delivery (e.g. security codes, new-lead email alerts).
• Cloudflare — CDN, edge proxy, DNS, and bot protection for the marketing site and API edge.
• Amazon Web Services (AWS) — serverless API hosting (AWS Lambda) and related cloud infrastructure.
• Google — "Sign in with Google" OAuth authentication (only if you use it).

We use industry-standard technical and organizational measures to protect information, including encryption in transit, encryption at rest where applicable, access controls, and other reasonable security measures. While no method of transmission or storage is completely secure, we work to protect your data and take reasonable steps to keep it safe.

We retain your account information for as long as your account is active. Lead data captured by your chatbots is retained until you delete it or your account is closed. You can export and delete lead data at any time from the Service.

We maintain operational backups to support service continuity. Backup retention periods may vary.

• Access, correct, or update your account information at any time in Settings.
• Export or delete lead data collected by your chatbots.
• Delete your account at any time from Settings → Danger Zone. This permanently deletes your account and the associated data (chatbots, captured leads, and integrations), and it cannot be undone. If you delete an account with an active paid subscription, we cancel the subscription at the payment processor so you are not charged again; the current billing period is not refunded.
• Contact us to exercise any rights available under applicable privacy laws, including those recognized under the GDPR, the UK GDPR, and the California Consumer Privacy Act (CCPA).
• Where applicable law provides for them, rights may include access, correction, deletion, restriction, portability, and objection to processing, as well as the right not to be discriminated against for exercising your choices.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. We will present a consent notice where required and will only load non-essential cookies with your consent.

• Essential cookies — required for sign-in and core functionality.
• Analytics cookies — help us understand how the Service is used, subject to your consent where required.

You can control cookies through your browser settings, though some features may not work without them.

We may process and store information in locations outside your country of residence. Where we transfer personal data across borders, we take steps to protect it, including through appropriate safeguards such as standard contractual clauses or reliance on adequacy decisions where applicable.

ChatMakeee currently operates as a deterministic logic-based platform and does not use artificial intelligence or machine learning to process chatbot conversations. If AI-powered features are introduced in the future, this Privacy Policy will be updated accordingly.

The Service is not directed at children under the age of 13 (or the applicable age of consent in your jurisdiction), and we do not knowingly collect personal information from children.

If you are a business customer and require a data processing agreement (DPA), contact us and we will provide one that reflects the processing we carry out on your behalf.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice within the Service. Continued use of the Service after changes take effect means you accept the updated policy.

If you have questions about this Privacy Policy or your data, contact us at chatmakeee_support@chatmakeee.com. For grievance redressal, see our Contact page, which lists our contact details and physical address.