Privacy Policy

Last updated: 1 May 2026

1. Who we are

ChatToSales ("we", "us", "our") is a WhatsApp commerce assistant operated by Osmani Technologies Limited, a company registered in Nigeria (RC 9532723), with registered address at 13, Obe Street, Bodija, Oyo State, Nigeria. Osmani Technologies Limited is the data controller for the purposes of this policy. Our website is www.chattosales.com.

2. Information we collect

We collect only what is necessary to provide the service:

  • Account information: Your WhatsApp phone number, business name, and business category. If you sign up via email, we also store your email address and a hashed password.
  • WhatsApp messages: Messages you and your customers send through the ChatToSales platform number or your connected WhatsApp Business number. These are used to process orders, manage your catalogue, and provide business intelligence.
  • Order and payment data: Order details (items, quantities, prices), payment status, and customer contact information provided during the ordering process.
  • Media files: Photos of price lists and voice notes you send during onboarding or catalogue updates. These are processed to extract product and pricing information and are not stored permanently.
  • Usage data: Basic analytics such as login timestamps and feature usage to improve the service.

3. How we use your information

  • Process and manage orders between you and your customers
  • Build and maintain your product catalogue
  • Send order notifications, confirmations, and reminders via WhatsApp
  • Generate business reports and insights
  • Track debts and send payment reminders
  • Process payments through our payment partner (Paystack)
  • Authenticate your identity when you log in
  • Improve and develop new features for the platform

4. Third-party services

We share data with the following third parties only as needed to operate the service:

  • Meta (WhatsApp Business API): To send and receive WhatsApp messages on your behalf. Subject to Meta's WhatsApp Business Policy.
  • Paystack: To process payments. Paystack receives the payment amount and customer contact details. Funds are paid directly to the trader's bank account — we never hold your funds. Subject to Paystack's Privacy Policy.
  • Google Cloud (Vision API): To read text from photos of price lists during onboarding. The image is sent to Google for OCR processing and is not retained by Google.
  • OpenAI (Whisper): To transcribe voice notes into text. Audio is sent for transcription and is not retained.
  • Anthropic (Claude): To extract product information from text and assist with order processing. Message content is sent for AI processing and is not used to train models.

We do not sell, rent, or trade your personal information to anyone.

5. Data security

  • WhatsApp access tokens are encrypted at rest in our database — never stored in plaintext
  • Passwords are hashed using industry-standard algorithms — we cannot read them
  • All connections use HTTPS/TLS encryption in transit
  • Login sessions use short-lived JWT tokens stored in memory, not cookies
  • We use rate limiting to prevent brute-force attacks on login endpoints

6. Data retention

  • Your account data is kept for as long as your account is active
  • Order history is retained to provide business reports and insights
  • Media files (photos, voice notes) are processed and discarded — not stored permanently
  • If you delete your account, your personal data will be removed within 30 days. Anonymised, aggregated data may be retained for analytics.

7. Your rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate information
  • Request deletion of your account and associated data
  • Export your order and catalogue data
  • Withdraw consent for data processing (which may require closing your account)

To exercise any of these rights, send a WhatsApp message to our platform number or email us at hello@chattosales.com.

8. Children

ChatToSales is designed for business use and is not intended for children under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal data, please contact us.

9. Changes to this policy

We may update this privacy policy from time to time. When we make changes, we will update the "Last updated" date at the top. For significant changes, we will notify you via WhatsApp or through the dashboard.

10. Contact us

If you have questions about this privacy policy or how we handle your data, contact us at hello@chattosales.com.