Privacy

Privacy Policy

This Privacy Policy explains how ChatPeak, operated by Nils Stolle, collects, uses, shares, and protects personal information when you visit chatpeak.app, create an account, connect social platforms, or use ChatPeak services.

1. Who We Are

ChatPeak is operated by Nils Stolle, Zwochau 48, 04808 Thallwitz, Germany, who is responsible for the processing described in this policy. ChatPeak provides software for social DM automation, lead capture, conversation management, broadcasts, analytics, and related integrations.

For privacy questions, requests, or notices, contact us at hello@chatpeak.app.

2. Information We Collect

  • *Account information, including name, email address, password authentication data, avatar, workspace membership, role, and onboarding status.
  • *Workspace information, including workspace name, type, website URL, plan, subscription status, team members, and settings.
  • *Integration information, including connected platform, display name, username, external account IDs, connection status, API configuration, tokens or secrets, and sync timestamps.
  • *Contact and conversation information, including social handles, names, email addresses, phone numbers, avatars, tags, message history, message metadata, source, delivery or read timestamps, and conversation status.
  • *Automation and campaign information, including triggers, message templates, audience filters, logs, run status, webhook payloads, analytics, errors, and related metadata.
  • *Billing information, including Stripe customer IDs, billing email, plan, subscription status, product and price IDs, billing cycle dates, and payment method details handled by Stripe.
  • *Support, sales, and contact information that you send to us through forms, email, demos, support requests, or other communications.
  • *Technical information, including IP address, device and browser data, pages visited, timestamps, session cookies, authentication cookies, logs, and security events.

3. How We Use Information

  • *Provide, secure, maintain, and improve ChatPeak.
  • *Create accounts, authenticate users, manage sessions, and administer workspaces.
  • *Connect supported social platforms and third-party tools at your direction.
  • *Run automations, deliver messages, route conversations, manage contacts, and measure performance.
  • *Process subscriptions, invoices, billing, trials, upgrades, downgrades, cancellations, and taxes.
  • *Send service messages, product updates, support replies, security notices, and operational notifications.
  • *Prevent abuse, spam, platform misuse, fraud, unauthorized access, and violations of our Terms.
  • *Comply with legal obligations and enforce agreements.

5. Customer Data and Processor Role

When a customer uses ChatPeak to collect, manage, or message contacts through social platforms, the customer decides what data to collect, what messages to send, and why the data is processed. In that context, the customer is typically the controller or business, and ChatPeak acts as a processor or service provider.

Customers are responsible for having the required permissions, notices, consents, opt-outs, and platform rights for their own contacts, campaigns, automations, and connected accounts.

6. Data We Receive From Instagram

When a workspace connects an Instagram professional account through Instagram Login, it grants ChatPeak the permissions instagram_business_basic, instagram_business_manage_messages and instagram_business_manage_comments. ChatPeak uses them only for that workspace and only for the features the workspace sets up.

  • *What we receive: the account's Instagram user ID, username, name, account type and profile picture; the account's posts and reels, with their caption, link, date and like and comment counts, when the workspace chooses posts for an automation; comments on the account's posts, with the comment text and the commenter's Instagram-scoped ID and username; direct messages sent to or from the account, with their text, attachments such as photos, videos, voice messages, files and shared posts, story reply references and read receipts; and, where Instagram provides them, the name, username, profile picture and follower status of people who message the account.
  • *How we use it: to match comments and messages against the workspace's automations, to send the private replies, public comment replies and direct messages the workspace configures or writes, to show conversations and contacts in the workspace inbox, and to count replies sent, messages read and replies received for each automation.
  • *Attachments: photos, videos, voice messages and files sent in direct messages are copied into private storage so the workspace can still open them after Instagram stops serving them, and files the workspace sends are stored there too. Only members of the workspace can open them. Stories that mention the account are shown from Instagram and never copied.
  • *What we do not do: we do not sell Instagram data, use it for advertising, combine it across workspaces, or share it with anyone other than the workspace members and the service providers that host and operate ChatPeak.
  • *Access tokens: the token Instagram issues is stored encrypted and is only used to call the Instagram API for the workspace that connected the account. It is deleted as soon as the account is disconnected or access is removed in Instagram.
  • *Retention: conversations, messages, their attachments and contacts stay in the workspace until the workspace deletes them, disconnects and deletes its data, or the workspace is deleted. Files that were uploaded but never sent are deleted after a day. Raw webhook events are deleted after 30 days, or after 90 days when they could not be processed, and automation logs after 90 days.
  • *Deletion: remove ChatPeak from the Instagram account under Settings and activity, Apps and websites, and send a deletion request, and we delete everything stored through that account right away. You can also email hello@chatpeak.app. Details are on https://chatpeak.app/data-deletion.

7. How We Share Information

  • *Service providers that host, secure, analyze, support, and operate ChatPeak, including infrastructure, authentication, database, billing, email, support, and monitoring vendors.
  • *Connected platforms and integrations, such as Instagram, TikTok, Facebook, Stripe, Shopify, HubSpot, Zapier, Klaviyo, ActiveCampaign, and webhook endpoints, when you connect or configure them.
  • *Workspace members, according to their role and permissions.
  • *Authorities, courts, regulators, or other parties when required by law or needed to protect rights, safety, security, or the integrity of ChatPeak.
  • *Successors in a merger, acquisition, financing, restructuring, sale of assets, or similar corporate transaction.

8. Cookies and Similar Technologies

We use cookies and similar technologies to keep users signed in, maintain sessions across ChatPeak subdomains, secure accounts, remember preferences, and understand how the service is used.

Some cookies are necessary for the service to work. Where required by law, optional analytics or marketing cookies will only be used with consent.

9. Retention

We keep personal information for as long as needed to provide ChatPeak, maintain records, comply with legal obligations, resolve disputes, enforce agreements, and protect the service.

Account and workspace data is generally retained while the account is active. After deletion or termination, we delete or anonymize personal information within a reasonable period unless retention is required for legal, security, backup, audit, billing, or dispute purposes.

10. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, authentication, encrypted transport, role-based workspace access, logging, and encryption and separation of integration access tokens.

No internet service is completely secure. You are responsible for maintaining strong credentials, controlling workspace access, and using connected platforms in accordance with their rules.

11. International Transfers

ChatPeak and its providers may process information in the United States, the European Economic Area, and other countries where we or our providers operate. When required, we use appropriate safeguards for international transfers, such as contractual protections or other lawful transfer mechanisms.

12. Your Rights and Choices

  • *Access, correct, export, or delete certain personal information.
  • *Object to or restrict certain processing.
  • *Withdraw consent where processing is based on consent.
  • *Opt out of marketing emails by using the unsubscribe link or contacting us.
  • *Request account deletion, subject to lawful retention needs.
  • *Lodge a complaint with a data protection authority if you are in a region where that right applies.

13. Children

ChatPeak is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided personal information to us, contact hello@chatpeak.app.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new last updated date. Material changes may also be communicated by email, in-product notice, or another reasonable method.