Privacy
Privacy policy
How Chatout collects, uses and protects data across connected Instagram and Shopify workspaces.
Chatout is in early access. This policy requires final business and legal review.
Who this policy covers
This policy covers Chatout website visitors, merchants and their authorized team members, and people who message a business through a connected channel. Merchants also have their own privacy responsibilities for customer conversations and commerce activity.
Information we process
Depending on the features a merchant uses, this includes account and workspace details; connected Instagram account identifiers, authorized access credentials, message content, sender identifiers and timestamps; Shopify store, catalog, price and availability information; business knowledge; checkout handoff records; and technical and security logs. Website and service requests may also include browser or device information and IP addresses.
How we use information
We use this information to authenticate users, connect authorized accounts, manage conversations, prepare AI-assisted replies using relevant message and business context, retrieve product information, send eligible follow-ups under merchant controls, support human takeover, direct customers to merchant checkout, and maintain service security and reliability.
Instagram and Meta
A merchant can authorize an Instagram professional account through Meta. The instagram_business_basic permission supports account identification and integration; instagram_business_manage_messages supports eligible messaging operations. Chatout processes Instagram direct messages to display conversations and help generate replies. Messaging and follow-ups depend on Meta permissions and platform rules. Chatout does not ask for an Instagram password.
Shopify and checkout
When a merchant connects Shopify, Chatout uses authorized store and product information, including variants, prices and availability, to help answer customer questions. Chatout may create a checkout handoff to the merchant's commerce experience. Purchases and payment-card entry take place with the merchant's checkout provider; Chatout does not process buyer card credentials in the conversation service.
AI and service providers
Relevant conversation and business context may be processed by AI providers to help formulate responses. Hosting, storage and other operational providers may also process information needed to run the service. The provider list, processing locations and applicable safeguards are under review; Meta and Shopify also process information under their own policies.
Data retention and deletion
Retention varies by data type and purpose. Workspace owners can schedule workspace deletion in account settings, subject to the service's deletion workflow. Access, correction and deletion requests may require identity verification and review. Some information may be retained for legal, security or operational reasons. Category-specific periods and external-copy handling are being finalized; we do not claim that every copy is deleted immediately or automatically.
How we protect data
We use workspace access controls, protected integration credentials, and checks on inbound integration events. Merchants can review conversations and take over from automation. No internet service can guarantee absolute security.
Your requests
If you have a Chatout account, contact the Chatout team through your account about access, correction, or deletion. If you messaged a business using Chatout, contact that business about your conversation. A public privacy contact address is being finalized.
International processing
Information may be processed in the locations where Chatout and its service providers operate. The actual provider locations and transfer safeguards require confirmation before a location-specific commitment can be made.
Cookies and website technologies
The Chatout application uses cookies for signed-in sessions and workspace preferences. Any optional website analytics or tracking technology should be disclosed here if enabled.
Changes to this policy
We may update this policy as the service and its data practices change. The current version will be published on this page with its effective date once approved.