Privacy Policy

01General provisions

This Privacy Policy describes how individual entrepreneur Nikita Nikolaevich Zaitsev (OGRNIP 322508100200401, INN 503513489450), the “Operator”, processes personal data of Chatva service users and of visitors of websites running the Chatva widget.

The Policy is drafted under Russian Federal Law No. 152-FZ “On Personal Data” dated July 27, 2006 and applies to all information the Operator may receive when you use the website, dashboard, widget and API.

By using the service you confirm that you have read and accept this Policy. If you disagree, please do not use the service and do not submit your data.

02Data we collect

We collect only the data required for the service to work. The scope depends on who you are: an account owner, a team operator, or a visitor of a website running the widget.

We never receive or store full card numbers: card data is entered on the payment provider’s secure page (T-Bank) or inside the CryptoBot Telegram bot. We store only the card token and the last 4 digits for display purposes.

03Purposes of processing

• creating and maintaining your account and access to the service;
• processing payments, issuing receipts and managing subscriptions;
• delivering messages between website visitors and the user’s team;
• responding to support requests;
• security, fraud and abuse prevention;
• sending service emails and, with your consent, marketing emails;
• analyzing service usage and improving the product.

04Legal bases

We process data on the following bases under Article 6 of Law No. 152-FZ:

• performance of a contract — the Terms of Service (account, subscription, billing);
• your consent — marketing emails, optional cookies, testimonials;
• requirements of Russian law — accounting and tax documents, responses to state requests;
• processing on the user’s behalf — data of website visitors collected via the widget.

05Emails and notifications

We send two types of emails. Service emails — registration confirmation, sign-in codes, payment receipts, subscription and critical service notices. They are part of providing the service and cannot be disabled.

Marketing emails — product news, customer-service tips and special offers. We send them only with your consent, at most twice a month.

• unsubscribe via the link at the bottom of any marketing email — one click, effective immediately;
• notification settings in the dashboard let you choose which emails to receive;
• service emails required for your account are not affected by unsubscribing.

06Who we share data with

Data is shared only with contractors the service cannot operate without, and only to the extent needed. Each is bound by a confidentiality agreement.

Paying via CryptoBot may involve a cross-border transfer of a limited data set (payment id and amount). Personal data of Russian users is recorded and stored in databases located in Russia under Part 5, Article 18 of Law No. 152-FZ.

When required by law we may disclose data to state authorities, only on a properly executed request.

07Data of widget website visitors

The user who installs the widget on their website is the independent operator of their visitors’ data. Chatva processes conversations and visitor contacts on that user’s instructions (clause 3, Article 6 of Law No. 152-FZ) and solely to deliver messages to their dashboard.

• we do not use user conversations for advertising and do not read them unless necessary;
• the user must inform their website visitors about data collection — our policy does not replace theirs;
• a website visitor may request deletion of their messages from the site owner or from us.

08Storage and security

• passwords are stored only as cryptographic hashes;
• all connections are encrypted via TLS;
• access to data is limited to staff on a need-to-know basis;
• backups are created regularly and stored encrypted.

Account data is kept while the account exists. Payment documents are retained for the periods required by tax law (at least 5 years). After account deletion, data is erased from active systems within 30 days and from backups within 90 days.

09Cookies

We use cookies and similar technologies to run the service: authentication, theme and language preferences, request-forgery protection.

Most browsers let you restrict cookies in settings. Note: disabling necessary cookies makes signing in to the dashboard impossible.

10Your rights

As a personal data subject you may:

• request information about the data we process about you;
• demand correction, blocking or deletion of incomplete, outdated or unlawfully obtained data;
• withdraw consent to marketing emails and optional cookies;
• demand deletion of your account and related data;
• complain to Roskomnadzor or file a lawsuit.

To exercise these rights, email hello@chatva.app with the subject “Personal data”. We respond within 10 business days. We may ask you to confirm your identity before fulfilling a request.

11Children

The service is intended for businesses and persons aged 18 or older. We do not knowingly collect children’s data. If you learn that a child has submitted data to us, email us and we will delete it.

12Changes to this Policy

We may update this Policy when the service or legislation changes. The current version is always available on this page with the last-updated date above. We will additionally notify you by email about material changes.

13Contacts and requisites

For any personal-data questions email hello@chatva.app. Written requests may be sent to the Operator’s registered address; request the current address by email.