Effective Date: 4 November 2025
This Privacy Policy explains how CARTCREST E‑MARKET SOLUTIONS PRIVATE LIMITED ("we", "our", or "us") collects, uses, discloses, and protects personal information when you use Chatwise, our Instagram and WhatsApp messaging automation tool (the "Platform"). By using the Platform, you agree to the practices described in this Policy.
1. Introduction & Scope
This Policy covers data we process when you create or use a Chatwise account, connect Instagram and/or WhatsApp to the Platform,use features such as comment‑to‑DM automation, templates, assignments, or AI‑assisted replies,interact with our websites, dashboards, documentation, or support channels.
Note: We do not operate Instagram or WhatsApp. Their collection and use of data is governed by their respective policies and terms.
2. Information We Collect
2.1 Account & Contact Information
Name, email address, phone number, business name, and workspace details.
Authentication and security data (password hashes, multi‑factor tokens).
2.2 Channel & Business Information
Instagram/Meta IDs (page/user IDs), post/reel IDs, comment IDs;
WhatsApp Business number, business profile IDs, conversation IDs;
Configuration for automations, routing rules, templates, and assignments.
2.3 Messaging Content & Metadata
Messages you send/receive through the Platform (Instagram comments/DMs; WhatsApp messages), including timestamps, delivery/read receipts, and limited participant identifiers.
Media: We may access temporary media URLs (Instagram) or fetch media from WhatsApp for the purpose of rendering messages. We do not permanently store media; temporary caches are purged after processing.
2.4 Usage & Device Data
IP address, device and browser type, operating system, pages viewed, referring/exit pages, and actions performed in the dashboard.Diagnostic and performance logs, crash reports, and feature usage metrics.
2.5 Payment & Billing
If you purchase paid plans, limited billing information (billing contact, plan, invoice records) and payment status. Card details are handled by our payment processor.
2.6 Support & Communications
Content of messages you send to support, feedback forms, or surveys; troubleshooting artifacts you voluntarily provide (e.g., screenshots, exports).
3. How We Use Information
Provide and maintain Services: authenticate users, enable channel integrations, deliver/receive messages, power automation, and provide dashboards.
Improve and secure the Platform: monitor performance, detect and prevent abuse, debug and develop new features.
AI‑assisted features (optional): generate suggestions or automated replies based on your context and message history. Outputs may be inaccurate and should be reviewed.
Communications: send transactional notices (service updates, security alerts) and, with your consent where required, product/feature updates and promotions.
Compliance: meet legal obligations, enforce terms, and protect rights, safety, and integrity of the Platform.
4. Sharing Your Information
Service Providers / Sub‑processors: cloud hosting, data storage, analytics, email delivery, support tooling, payment processors, and platform partners (e.g., Meta/WhatsApp). These providers process data on our behalf under contractual safeguards.
Integrations You Enable: when you connect Instagram or WhatsApp, data flows to and from those platforms per your configuration.
Legal: we may disclose information if required by law, court order, or to protect our rights, users, or the public.
Business Transfers: in the event of a merger, acquisition, or asset sale, data may be transferred consistent with this Policy.
5. Data Security
We employ reasonable technical and organizational measures (encryption in transit, access controls, audit logging, least‑privilege, backups) to protect information. However, no system is perfectly secure; we cannot guarantee absolute security.
6. Data Retention
We retain personal and business information as long as necessary to provide the Services, comply with law, resolve disputes, and enforce agreements. Channel data after disconnection and account data after deactivation are deleted per our Data Deletion Policy timelines (see Section 11).
7. Roles; Lawful Basis; Your Rights
7.1 Roles
For messaging content and customer data that you process via the Platform, you are typically the data controller (or equivalent), and we act as your processor/service provider.
7.2 Lawful Bases
Where applicable (e.g., under India’s Digital Personal Data Protection Act, 2023 (DPDP), GDPR/CCPA equivalents), our lawful bases include consent, performance of a contract, legitimate interests (e.g., securing and improving the Platform), and compliance with legal obligations.
7.3 Your Rights
Subject to applicable law, you may have the right to access, correct, delete, port, or restrict processing of your personal data. You can access and update many details in the dashboard. For other requests, contact us at admin@haulistic.io.
You are responsible for honoring your customers’ rights requests related to data you control. We will reasonably assist you in fulfilling such requests.
8. Children’s Privacy
Chatwise is not directed to children. We do not knowingly collect personal information from individuals under 13 (or the age of digital consent in your jurisdiction). If we learn that such data has been collected, we will delete it.
9. Cookies & Similar Technologies
We use cookies and similar technologies to authenticate sessions, remember preferences, and understand usage. You can manage cookies in your browser settings; some features may not function properly if cookies are disabled.
10. International Transfers
We may process and store data in locations outside your state or country. Where required, we implement appropriate safeguards for cross‑border transfers (e.g., contractual clauses) consistent with applicable law.
11. Data Deletion (Self‑Service & Requests)
11.1 Instagram (via Meta’s APIs)
To delete Instagram data obtained via Meta’s APIs: sign in → Settings → Channels → Instagram → Disconnect. On disconnection, we delete Instagram account data (profile identifiers, linked post/reel IDs and minimal metadata, temporary media URLs, cached tokens) within 24 hours. We do not store or download Instagram media files.
11.2 WhatsApp (Cloud API or BSP)
To delete WhatsApp data connected to your number: sign in → Settings → Channels → WhatsApp → Disconnect. On disconnection, we delete WhatsApp conversation data stored in Chatwise (message content in inbox, metadata, templates stored in Chatwise, number/connection identifiers, cached media) within 24 hours. Messages resident with Meta or your BSP remain subject to their retention processes.
11.3 Delete Other Chatwise Data / Account Deactivation
To delete other data (e.g., workspaces, users, automations, analytics): email jeevan@haulistic.io. Verified requests are completed within 7 working days.
If you deactivate your Chatwise account, remaining data is deleted within 30 days. Deletion is irreversible.
See our public instructions page (when available) for quick steps.
12. Instagram & WhatsApp Integrations
Instagram: We store only temporary media URLs and minimal metadata needed for automation and linking. Temporary URLs are refreshed and expire per Instagram policies. On disconnection, all Instagram account data obtained via Meta’s APIs is deleted within 24 hours.
WhatsApp: We store the minimum necessary message content and metadata to render your inbox and automation. Media may be transiently cached for delivery and is purged shortly thereafter. On disconnection, WhatsApp data stored in Chatwise is deleted within 24 hours.
13. Changes to This Privacy Policy
We may update this Policy from time to time. We will notify you of material changes via the dashboard or email and update the Effective Date above. Your continued use of the Platform constitutes acceptance of the updated Policy.
14. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, contact:
Email: admin@haulistic.io (privacy inquiries)
Appendix A: Summary of What We Store vs. Don’t Store
Stored: temporary Instagram media URLs and minimal post/account metadata; WhatsApp message content necessary to render inbox and related metadata; channel identifiers and tokens while connected; automation configurations, templates, audit timestamps, and usage logs.
Not Stored / Not Archived: permanent copies of Instagram/WhatsApp media files beyond transient caching; expired media URLs; decrypted secrets after disconnection.