Privacy Policy

Chatmoji (“we”, “us”) operates the Chatmoji service at chatmoji.ai (the “Service”). This policy explains how we handle personal information when you use the website, the dashboard, the web chat widget, or a connected channel such as WhatsApp.

Two groups of people interact with the Service:

• Customers — businesses and teammates who create a workspace, configure agents, and subscribe to a plan.
• End customers — people who message those businesses through a widget or another channel the business connects.

If you message a business that uses Chatmoji, that business decides why your conversation is processed. We process it on their instructions so their agent can reply and their team can follow up. Questions about a specific conversation should go to that business first. This policy still describes what we do as their service provider.

Account and workspace. When you register we collect your name, email address, and a password. Passwords are stored only as a hash. If you sign in with Google, we receive your name, email, and Google account identifier from Google. We also store the workspace name, membership, and each member's role.

Agents, knowledge, and files. You choose what an agent knows: instructions, documents, pasted text, website sources, and files such as avatars. We store that content and the embeddings derived from it so the agent can retrieve relevant excerpts when it answers.

Conversations. We store threads and messages between your end customers and your agents or teammates, including who sent each message, the channel, handoff status, and which knowledge excerpts supported a reply. A contact may include a display name, email, phone number, and an identifier from your own systems if you pass one in. Widget visitors can stay anonymous until they share contact details in the chat. We keep the thread so the conversation can resume when the widget opens again.

Billing and usage. Paid plans are billed in US dollars through Polar. Polar processes payment card details; we do not store full card numbers. We store the plan, subscription status, and usage for the workspace. An AI conversation is a thread in which the agent replies. Up to 12 AI replies in the same thread during a UTC month count as one conversation. Messages your team sends do not count toward that allowance.

Technical data. We collect data needed to run and protect the Service, such as IP address, browser type, timestamps, and the pages you open on our marketing site, auth screens, onboarding, and dashboard. We use it to keep you signed in, prevent abuse, measure sign-ups and subscriptions, and understand how people use the product. On those surfaces we use Google Analytics, Meta, and PostHog to measure visits, registrations, and purchases so we can improve Chatmoji and understand which marketing campaigns work. We do not sell personal information. The embedded chat widget on your customers' sites does not load these analytics tools.

We use a session cookie so you stay signed in. Marketing, auth, onboarding, and dashboard pages may set first-party cookies for language preference, campaign attribution (for example UTM parameters or ad click identifiers), and analytics from Google Analytics, Meta, and PostHog. The dashboard may also store preferences — theme, and inbox filters such as agent or channel — in your browser's local storage. You can clear cookies and local storage in your browser. Clearing the session cookie signs you out.

We use personal information to:

• Create and secure your account and workspace
• Run agents, retrieve knowledge, and deliver replies
• Show conversations to the right teammates and support human handoff
• Measure plan usage and bill subscriptions
• Send service messages about your trial, billing, security, and material product changes
• Detect abuse and protect the Service

We do not use your knowledge or your customers' conversations to train Chatmoji's own models.

Replies are generated by language models reached through OpenRouter. A request includes the agent's instructions, the relevant knowledge excerpts, and the conversation needed to answer. Knowledge is embedded with a dedicated embedding model so retrieval stays inside your workspace. If someone sends an image, a vision model may describe it, and the chat model receives that description rather than the image bytes.

Model providers process that content to return the reply or the embedding. How long a provider keeps a prompt is governed by that provider's terms and the route we use. We send this content to generate your workspace's answer, not to build a model that serves other customers.

Models can be wrong. You are responsible for the instructions, knowledge, and handoff rules you configure, and for reviewing conversations that need a person.

We share information with providers that process it to run Chatmoji:

• Neon — database hosting for accounts, knowledge, and conversations
• OpenRouter and the model providers a request is routed to — replies, vision descriptions, and embeddings
• Amazon Web Services (S3) — files and avatars. The default storage region is Asia Pacific (Singapore)
• Polar — subscription billing
• Google — only if you choose Google sign-in
• Trigger.dev — background indexing of knowledge files
• Composio — only for integrations you connect, such as Gmail or Calendar, and only the actions you allow
• WAHA — WhatsApp session hosting when you connect a number
• DiceBear — default agent portraits, requested with a random seed rather than a person's name

Members of your workspace can see your end customers' messages. If you connect an integration or a custom MCP server, the data that tool needs is sent to the destination you configured.

We may also disclose information if the law requires it, or to protect the rights, safety, and security of Chatmoji, our customers, and the public. If we sell or reorganize the business, information may transfer to the successor, which must honor this policy.

We keep account, workspace, knowledge, and conversation data while the workspace is active. When you delete a source, an agent, or the workspace, we delete the corresponding records from our primary database. Backups may hold copies for a limited time and are then overwritten. Billing records may be kept longer where tax or accounting rules require it.

Workspaces are isolated from each other. Dashboard access requires authentication, and secrets for integrations are encrypted at rest. No method of transmission or storage is perfectly secure. We protect information with measures appropriate to the Service.

You can update your profile in the dashboard, edit or delete knowledge you added, and remove conversations your workspace controls. To close a workspace, email us at the address below.

Depending on where you live, you may have the right to access, correct, delete, or export personal information, or to object to certain processing. End customers should contact the business they messaged. We will help that business respond. Customers can email [email protected] and we will reply within a reasonable time.

We and our providers may process information in countries other than where you live, including the United States and Singapore. We use providers that commit to protect information when it crosses borders.

The Service is for businesses and their customers. It is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us and we will delete it.

We will update this page when our practices change and revise the date at the top. If a change materially affects your rights, we will notify workspace owners by email or in the product.

Chatmoji
chatmoji.ai
[email protected]

The Terms of Service explain the contract for using Chatmoji.