Privacy Policy

Effective Date: [INSERT DATE]


This Privacy Policy explains how [NILLARD LTD / ConvertChat] (“we”, “us”, “Provider”) collects, uses, discloses, and stores personal data when you use our website, product, or services.


1. Data We Collect

a. Account & Contact Data: name, email, business name, phone, billing address.
b. Customer / Lead Data: WhatsApp identifiers, messages, phone numbers, chat content, booking times, order values.
c. Usage Data: app telemetry, logs, IP addresses, device/browser metadata.
d. Payment Data: billing details processed by Stripe or payment providers (we do not store full card numbers).
e. Support Data: emails, call transcripts, chat logs used for support.


2. How We Collect Data

  • Directly from you (forms, account creation, onboarding).

  • From integrations (Shopify, Stripe, Calendly) when you connect them.

  • Automatically via the app (logs, analytics).

  • From third parties you authorize (BSPs, AI vendors).


3. How We Use Data (Purposes)

  • Provide and maintain the Services (message routing, follow-ups, Kanban).

  • Onboarding & configuration (connect WhatsApp, submit templates).

  • Billing and fraud prevention.

  • Improve and develop features, analytics.

  • Customer support and dispute resolution.

  • Legal compliance and safety (abuse prevention).


4. Lawful Basis (where applicable)

  • Performance of contract (to deliver Services).

  • Legitimate interests (product improvement, fraud prevention) — balanced against privacy rights.

  • Consent (where required for marketing or certain messaging).

  • Legal obligation.


5. Disclosure & Third Parties

We share personal data with:

  • WhatsApp / Meta (WABA / BSP) and BSP providers to send/receive messages.

  • Payment processors (Stripe, PayPal).

  • AI and LLM providers (for optional AI features).

  • Hosting providers (AWS, Vercel, etc.).

  • Legal/financial advisors where required.
    We require subprocessors to implement appropriate security and only process data per our instructions.


6. International Transfers

Third parties or hosts may be outside your country. We will use standard contractual protections (SCCs) or other lawful mechanisms for transfers.


7. Data Retention

We retain interaction logs and lead data for [90 days] by default for troubleshooting and analytics, then anonymize or delete unless you request otherwise or contractual/legal retention obligations require longer. Billing records retained per tax rules.


8. Your Rights

Depending on your jurisdiction you may have rights to: access, rectify, erase, restrict processing, data portability, object to processing, or withdraw consent. To exercise rights contact [contact@nillard.com]. We will respond within applicable legal timelines.


9. Security

We implement reasonable technical and organizational measures (encryption in transit, access controls, backups). No system is 100% secure — report incidents to [contact@nillard.com].


10. Cookies & Tracking

We use cookies and analytics (Google Analytics, etc.) for performance and usage tracking. You can manage cookie preferences via our cookie banner. For detailed cookie list see our Cookie Policy [link].


11. Children

Services are not intended for children under 16 (or applicable age). We do not knowingly collect data from children.


12. Changes to Policy

We may update this Policy. We’ll post the new version with an updated Effective Date. For material changes we’ll notify active customers.


13. Contact

Data Controller: [NILLARD LTD / CONVERTCHAT]
Email: [contact@nillard.com]
Address: [71-75 Shelton Street, Covent Garden, London, United Kingdom]