Privacy Policy

Last updated October 5, 2026

This policy explains what personal data ChatLoop Cloud, operated by ChatLoop, handles and why. It follows Egypt’s Personal Data Protection Law (No. 151 of 2020).

Two kinds of data

Account data: the email address, password (stored only as a one-way hash) and language of you and your team, your business name and the business profile you fill in, your plan, usage and payment records. For this data we decide how it is used.

Your customers’ data: the phone numbers, names and messages (including images and voice notes) of people who message your WhatsApp number, and the notes, tags and stages you add. We process this data on your behalf and only to run the service for you; you decide what it is for.

How we use it

To sign you in and keep your account secure; to receive and send WhatsApp messages; to write AI replies and spot likely buyers; to transcribe voice notes and read images when your plan includes it; to count usage against your plan; to take payments; and to email you about your account, such as confirming your address or resetting your password. We do not sell personal data or use it for advertising.

Who else processes it

AI model providers, reached through OpenRouter, receive the recent conversation and your business profile to write each reply. Voice notes are transcribed by OpenAI. These providers may process data outside Egypt.

Paymob processes payments. Card and wallet details are entered on Paymob’s page and never reach us; we keep only the amount, plan, date, status and Paymob’s reference.

Hosting, database and email providers store and deliver data for us under their own security commitments.

How long we keep it

We keep account and customer data while your workspace exists. Deleting the workspace from Settings deletes its chats, customers, team members and payment records. Removing a team member deletes their account. Backups and logs may keep copies for a limited time before they are overwritten.

Security

Connections are encrypted in transit, passwords are hashed, and connection secrets are encrypted at rest. Each workspace can only see its own data, and access by our staff is limited to support and operating the service.

Your rights

You can see and correct your account data in the dashboard, and ask us for a copy of it, for corrections, or for deletion. If you are one of our customers’ customers, contact the business you messaged first; we will help them answer your request.

Contact

Privacy questions and requests: the support contact shown in your dashboard.