Privacy Policy

1Who We Are and How to Contact Us?

Who we are: ChatBucket is a company registered in India (referred to as "ChatBucket", "we", "us", or "our" in this Privacy Policy).

Our address is Plot No. 106, Shalivahana Nagar Road, Srinagar Colony, SBH Colony, Yousufguda, Hyderabad, Telangana 500073, India.

How to contact us: For general support, privacy-related inquiries, or data subject requests, please contact us at: hello@ChatBucket.business.

2Our Relationship to You

It is important that you identify which relationship(s) you have with ChatBucket to understand our data protection obligations and your rights under this Privacy Policy.

Hereinafter, we may refer to Customers and Users collectively as "You".

3Your Rights Relating to Your Personal Data

Under GDPR, CCPA, PIPL, and DPDP Act, you may have certain rights concerning your Personal Data, including:

How to Exercise Your Rights

If You wish to exercise any of these rights, please contact us at hello@ChatBucket.business. We may request additional information to verify your identity. Typically, we aim to respond to requests within 30 days. In some cases, this period may be extended if Your request is complex or if multiple requests are made. We will inform You if more time is needed.

Complaints

Contact us at hello@ChatBucket.business. We may request additional information to verify Your identity. We typically respond within 30 days or in accordance with local law.

4Whose Personal Data Do We Collect

We may process Personal Data relating to the following groups, depending on how you use ChatBucket and which features/integrations you enable:

• Visitors/Prospects: People who browse the site/app or view docs/marketing.
• Users: Individuals with a ChatBucket account using platforms, apps, SDKs/APIs.
• Customers (Merchant/Developer Orgs): Company contacts such as admins, developers, billing/support.
• End Users of Customers: Individuals whose data flows through a Merchant's integration (we act as processor).
• People Who Contact Us: Anyone submitting forms or reaching support/privacy.
• Job Applicants/Candidates: Information provided during recruitment.
• From third parties (where lawful): KYC/identity providers, hosting/CDN/email vendors, and optional communications integrations you connect.

5When We May Process Your Personal Data

We may process your personal data received directly from You or from other sources. Therefore, Your personal data may be processed:

• If you have provided us with Your personal data via various means of communication (e.g. by sending us an inquiry, via email, via our Platform);
• In the case of conclusion or performance of a contract, including in case when Your personal data has been provided to us as contact data for the purpose of proper performance of the above contract;
• If we have received Your personal data from another source (e.g. from an entity that is our contractor / client, during events or from publicly available sources / websites);

6What Personal Data We Collect

ChatBucket uses Personal Data to provide and secure the Services, comply with law (e.g., KYC/AML where applicable), and improve reliability and support.

We collect information in three ways: (1) when you provide it to us, (2) automatically through operating our Services, and (3) from outside sources you connect or that support our compliance and operations.

Information You Provide to Us

The amount and type of information depends on your use of the Services and features you enable:

• Identification & Contact: name, email address, phone number, postal/address details, organization and role.
• Account & Profile: username, password/credentials, preferences (including accessibility settings).
• KYC/AML (only when required): government ID/passport details, liveness/face images, proof of address, sanctions-screening results—processed via authorized verification providers.
• Financial/Billing: limited billing details, invoices, transaction records and payment method metadata (we do not store full card numbers).
• Developer/Integration Data: API keys/tokens you create, webhook destinations, integration settings you configure (e.g., messaging app connections).
• User-Generated Content: messages, files, and other content you upload or route through the platform or connected integrations.
• Support & Communications: helpdesk tickets, forms, surveys, and other correspondence.

Information We Collect Automatically

We also collect some information automatically:

• Log & Device Data: IP address, device identifiers, operating system and app/browser version, pages/screens viewed, timestamps, referrers, crash/performance logs.
• Usage & Telemetry: feature and API/SDK usage, authentication events, latency and reliability metrics.
• Security Signals: anomalous activity indicators, abuse/fraud prevention signals, audit trails.
• Location Data (if permitted): approximate location inferred from IP or device settings.
• Voice/Media Processing (feature-specific): when you use voice, video, or accessibility features, we process the media necessary to deliver the feature; for private conversations we do not monitor content and minimize retention to what's operationally required.

Information from Outside Sources

• Identity/KYC Providers: verification data and results when you or your organization request or require KYC/AML checks.
• Payment & Transfer Partners: payment status, settlement and reconciliation metadata (no full card PANs).
• Cloud/Security/Email & Communications Providers: service delivery (hosting, storage, security/CDN, email).
• Third-Party Integrations You Connect: data exchanged with messaging or other services you choose to link, processed under your or your organization's instructions.

Aggregated Data

We may create and use aggregated, de-identified data for analytics, benchmarking, and service improvement. Aggregated data does not identify you. If we ever combine or connect aggregated data with Personal Data so it can identify you, we treat the combined data as Personal Data.

Children's Data

Our Services are not directed to, and we do not knowingly collect information from, children under the age of 18. If you believe that a child under 18 may have provided us with Personal Information, please contact us.

Public Data

Information that You choose to make public can be disclosed publicly.

That means, of course, that information like any content that you make public on Your website is all available to others. Public information may also be indexed by search engines or used by third parties. Please keep all of this in mind when deciding what You would like to share.

7How We Use Cookies and Other Tracking or Profiling Technologies

ChatBucket may collect non-personally identifiable information regarding your usage of our websites and platforms, including the pages You viewed, demographic data such as server locations, and other information that does not identify You. Like most online services, we also use cookies and other technologies that may collect Personal Data.

Cookies

What are cookies? When you visit the Services, we may send one or more "cookies" – small data files – to Your computer to uniquely identify your browser and let ChatBucket help you enhance your navigation through the Site. A cookie may convey anonymous information about how you browse the Services to us so we can provide you with a more personalized experience, but does not collect personal information about you. A persistent cookie remains on your computer after you close your browser so that it can be used by your browser on subsequent visits to the Service. Persistent cookies can be removed by following your web browser's directions. A session cookie is temporary and disappears after you close your browser.

What types of cookies do we use? Our websites use the following types of cookies for the purposes set out below:

How can I disable cookies? You can typically reset your web browser to refuse all cookies or to notify you when a cookie is being sent. In order to do this, follow the instructions provided by your browser (usually located within the "settings", "help" "tools" or "edit" facility). Many browsers are set to accept cookies until you change your settings.

If you do not accept our cookies, you may experience some inconvenience in your use of our Services and some features of the Service may not function properly.

Log Files

We automatically collect certain information about how You use and navigate our Services (e.g., IP address, browser type, device data). We use these logs for troubleshooting, security monitoring, and usage statistics.

8How We Use Your Personal Data and Why

We generally use Personal Data for various purposes, including delivering and improving our Services, managing our platforms, and providing customer and technical support. Additionally, we utilize this data for conducting research and analysis about our Platform, verifying user identity, and preventing fraud or other unauthorized or illegal activities. Our use of Personal Data also extends to enforcing or exercising any rights outlined in our Services Agreements.

We have set out below, more detailed examples of relevant purposes for which we may use your Personal Data.

We don't engage in solely automated decisions with legal/similarly significant effects without required safeguards; where automated signals are used (e.g., fraud/KYC), you can request human review where the law provides.

9AI Training, Model Usage & AI Outputs

ChatBucket builds AI-powered communication features (translation, transcription, captions, voice synthesis, sign-language interpretation, summarization, and intelligent agents). We treat customer privacy and confidentiality as a foundational principle in our model development practices.

With Your Consent. We may share and disclose information with Your consent or at Your direction. For example, we may share Your information with third parties with which You authorize us to do so.

9.1AI Training, Model Usage & AI Outputs

ChatBucket builds AI-powered communication features (translation, transcription, captions, voice synthesis, sign-language interpretation, summarization, and intelligent agents). We treat customer privacy and confidentiality as a foundational principle in our model development practices.

Training on Customer Data

ChatBucket aims to respect customer privacy and confidentiality in its model development practices. We do not use customer private conversations, end-to-end encrypted communications, or enterprise customer business content to train public, shared, or third-party AI models, except where (i) you have provided explicit, opt-in contractual consent, (ii) it is required to deliver a feature you have specifically requested, or (iii) it is necessary for security, fraud prevention, or platform integrity. Specific training arrangements, where applicable, are governed by your Order Form, Data Processing Agreement (DPA), or product-specific terms.

Aggregated & De-Identified Data

Aggregated, de-identified, or anonymized telemetry and operational metrics may be used to improve platform reliability, performance, security, abuse detection, and overall service quality. Such data does not identify any individual or customer.

AI Output Limitations

AI Outputs (translations, transcriptions, voice synthesis, summaries, etc.) may contain inaccuracies, delays, omissions, or unintended interpretations. Users are responsible for reviewing and verifying AI Outputs before relying on them for business, legal, medical, financial, compliance, or operational purposes. AI features may be updated, retrained, or discontinued without prior notice.

Automated Decisions

We do not engage in solely automated decision-making with legal or similarly significant effects without required safeguards. Where automated signals influence consequential outcomes (e.g., fraud or KYC determinations), you may request human review where applicable law provides.

10How Long We Store Your Personal Data

We retain your Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including those specified under 'How We Use Your Personal Data and Why'. This includes:

• Active Use: While Your account remains active or as needed to provide You with our Services.
• Compliance & Legal: To comply with applicable laws and regulations (such as Anti-Money Laundering (AML) requirements), resolve disputes, enforce our agreements, and demonstrate compliance. Certain transactional records may be retained for at least 60 days after the termination of Your account or longer if required by law.

We may also retain data beyond the termination of your contract for the duration necessary to pursue legitimate business interests, conduct audits, or fulfill regulatory obligations.

After the applicable retention period, we securely delete or anonymize any Personal Data that is no longer required.

11Where We Store Your Personal Data

We currently operate and contract in India. Production workloads are hosted primarily in AWS India regions (e.g., Hyderabad/ap-south-2), with DigitalOcean used as needed under the cloud shared-responsibility model. End-to-end encrypted messaging/calls are not stored server-side; we retain only limited-service data. Backups are encrypted; any cross-region storage is selected to meet contractual/regulatory obligations.

We also rely on certain vetted service providers (e.g., Cloudflare for security/CDN; Google Workspace/Drive for internal storage) under data-processing terms. These providers can be configured to meet cross-border safeguards and do not change our commitment to minimize personal data at rest.

Country/region-specific transfer safeguards

Notes on residency choices. Where customers, regulations, or payment rails require residency (e.g., India UPI data), we keep data in-country. Otherwise, region selection and any mirrored/backup locations are configured to satisfy applicable law, contractual commitments, and security best practices.

12How We Protect Your Personal Data

ChatBucket employs industry-standard physical, managerial, and technical safeguards to preserve the integrity and security of Your personal information. Access to Your Personal Data is restricted to employees and other staff with a business need for such access, all of whom are bound by a contractual duty of confidentiality.

We conduct periodic reviews of our policies and procedures to assess their effectiveness and ensure they remain up-to-date. Additionally, we have established procedures to address any actual or suspected Personal Data breaches.

It's important to note that ChatBucket cannot guarantee the protection, control, or management of your Personal Data as outlined in this Privacy Policy if You share Your login and password information with any third party, including those operating websites or providing other services.

13Links to Other Websites

Our Services may contain links to external sites not operated or controlled by ChatBucket. We are not responsible for their content, accuracy, or privacy practices. Once You navigate away from our Services, this Privacy Policy no longer applies. We encourage You to read the privacy policies of those third-party websites to learn how they collect and process Your information.

14Customer's Obligations to Respect Individual Users' Rights

If you are a Customer integrating our Services to manage Personal Data of Your end users:

• You are responsible for ensuring compliance with data protection laws (e.g., GDPR).
• ChatBucket processes such Personal Data under Your instructions and is not liable for how You handle or use the data outside the scope of our Services.
• Where we act as Your data processor, we will follow our Data Processing Agreement (DPA) or similar contract in place with You.

15Changes to Our Privacy Policy

We reserve the right, at our sole discretion, to modify, add, or remove portions of this Privacy Policy at any time. Any changes become effective immediately upon posting on this page. We encourage You to periodically review this Privacy Policy. If we make material changes, we may notify you by email or post a prominent notice on our Platform prior to the change becoming effective.