Privacy policy

Who we are

ChatBox provides software that helps businesses manage their WhatsApp conversations, contacts, campaigns and payments. This policy explains which personal data the service processes, why, and the choices you have. Questions about it can be sent to test@getxtra.in.

Two roles

For your account, billing and use of the panel, ChatBox decides how personal data is used. For the contacts, messages and files that a business manages in its workspace, that business decides, and ChatBox processes the data on its behalf to provide the service. If you are a customer of a business that uses ChatBox, please contact that business first.

Data we collect

• Account data: name, e-mail address, mobile number, business name and password (stored only as a one-way hash).
• Billing data: plan, payments and invoices, the billing name, address, state and GSTIN you enter, and UPI references or screenshots you upload. Card and bank details are entered on the payment provider's page and are not stored by ChatBox.
• Workspace data: contacts, tags, custom fields, conversations, media, orders, appointments and settings that a workspace adds or receives.
• Technical data: IP address, browser details and request logs, used for security and troubleshooting.

How we use data

We use personal data to provide and secure the service, to send service messages such as sign-in codes, password resets, invoices and renewal reminders, to process payments, to answer support requests and to meet legal obligations. We do not sell personal data.

Service providers

Depending on the features a workspace uses, data is shared with WhatsApp and Meta to send and receive messages, with PayU to process online payments and with the e-mail provider that delivers service e-mails. AI providers, Google Sheets, Zapier, Make and systems connected through the API or webhooks receive data only when a workspace switches them on with its own keys or accounts. Backups may be stored with a storage provider chosen by the platform team.

Cookies

The site uses a session cookie to keep you signed in and a cookie that remembers your light or dark theme. It does not use advertising or third-party analytics cookies.

Security

Passwords are hashed, stored secrets are encrypted, sign-in can be protected with two-factor authentication, and each workspace can only access its own data. No system is perfectly secure, so please report any concern to test@getxtra.in.

Retention and deletion

Data is kept while the account is active. A workspace owner can export the workspace data at any time and request deletion; deleted workspaces are removed permanently 30 days after deletion.

Your choices and rights

You can view and correct your account details in your profile, and contacts can stop broadcasts by sending the business's opt-out keyword. To access, correct or delete personal data, or to raise a concern, contact test@getxtra.in. Customers of a business on ChatBox should contact that business.

Changes to this policy

This page is updated when practices change, with the date of the latest change.