Privacy Policy

Last updated: 28 May 2026

1. Who we are

TC Chat ("we", "us", "the Service") is a B2B platform that helps businesses communicate with their customers via the official WhatsApp Business API and integrates with CRM systems such as LeadVertex. The Service is operated from the website https://tc-chat.pw.

2. Data we collect

We collect and process the following categories of data:

  • Account data of our business users: email address, full name, organization name, role and authentication metadata.
  • Configuration data: WhatsApp Business account IDs, phone numbers, message templates, automation rules and integration credentials (stored encrypted).
  • End-customer contact data received from our users' CRM (e.g. LeadVertex): name, phone number in E.164 format, order identifiers and lead status.
  • WhatsApp message data: the content, direction, timestamps, delivery and read status of messages exchanged between our business users and their end-customers through the WhatsApp Business API.
  • Technical data: IP address, user agent, request logs, webhook traces and error events used for security, debugging and observability.

3. How we use WhatsApp messages

WhatsApp messages are processed solely to provide the messaging functionality requested by our business users. Specifically, we use WhatsApp message data to:

  • Deliver outbound template and session messages from the business user to their end-customer via Meta's WhatsApp Business API.
  • Receive inbound replies from end-customers and route them to the correct business user's inbox.
  • Track delivery, read and failure status for operational reporting and retry logic.
  • Maintain conversation history so operators can see prior context.

We do not sell WhatsApp message content, do not use it for advertising, and do not share it with third parties except the processors strictly required to operate the Service (see Section 6).

4. Legal basis

We process personal data on the basis of (a) the contract with our business users, (b) the legitimate interest of those businesses in communicating with their own customers, and (c) compliance with applicable law. Our business users are the data controllers for end-customer data; we act as a data processor on their behalf.

5. Retention

Account and configuration data is kept for as long as the account is active. WhatsApp messages and conversation history are retained for up to 24 months from the date of the message, unless the controlling business user requests earlier deletion. Technical logs are kept up to 90 days.

6. Sub-processors

We rely on the following sub-processors to operate the Service: Meta Platforms Ireland Ltd. (WhatsApp Business API), our cloud database and authentication provider, and our hosting / edge infrastructure provider. All sub-processors are bound by data protection agreements.

7. Your rights and data deletion

You have the right to access, correct, export or delete your personal data, and to restrict or object to processing. To request deletion of your data — including any WhatsApp message history associated with your phone number — send an email from the address or phone number concerned to:

privacy@tc-chat.pw

Please include "Data deletion request" in the subject. We will respond within 30 days. If you are an end-customer of a business that uses TC Chat, you may also contact that business directly; we will forward verified deletion requests to them.

8. Security

We use TLS for data in transit, encryption at rest for sensitive credentials, row-level security in our database and strict access controls. No system is perfectly secure, but we apply industry standard measures to protect your data.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the latest revision. Material changes will be communicated to active business users.

10. Contact

For any privacy-related questions, contact us at privacy@tc-chat.pw.