Privacy Policy

Introduction

Jetto Studio ("we," "our," or "us") operates Jetto Chat, a WhatsApp Business API SaaS platform that enables businesses to manage marketing campaigns, customer support, and contact management through WhatsApp. We are committed to protecting your privacy and the privacy of your customers.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use Jetto Chat and its associated services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access our platform.

Information We Collect

How We Use Your Information

We use the information we collect to:

• Provide and operate the Jetto Chat platform and WhatsApp Business API integration
• Enable you to send marketing campaigns and manage customer conversations via WhatsApp
• Process and deliver messages, media files, and broadcast templates
• Facilitate team collaboration with conversation assignment and contact notes
• Generate analytics, performance metrics, and campaign insights
• Manage your account, billing, and subscription
• Provide customer support and respond to your inquiries
• Improve platform features, automation rules, and user experience
• Ensure platform security and prevent unauthorized access
• Comply with WhatsApp Business API policies and legal obligations

Sharing Your Information

We may share your information in the following situations:

• WhatsApp/Meta: We share message content and contact information with Meta's WhatsApp Business API to deliver your messages and campaigns. This is essential for our platform to function.
• Service Providers: We work with trusted third-party service providers for hosting (cloud infrastructure), media storage (DigitalOcean Spaces), payment processing, and analytics.
• Within Your Organization: Data is shared with team members in your organization based on role-based access control permissions you configure.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
• Legal Requirements: We may disclose information when required by law, to enforce our policies, or to protect our rights and the safety of others.
• With Your Consent: We may share information with third parties when you explicitly authorize us to do so.

We do not sell your personal information or your customer data to third parties.

Data Security

We implement comprehensive security measures to protect your data:

• Data encryption in transit (HTTPS/TLS) and at rest
• JWT-based authentication with httpOnly cookies
• Role-based access control (RBAC) with 43 granular permissions
• Complete data isolation between organizations (multi-tenant architecture)
• Secure media storage with DigitalOcean Spaces (S3-compatible)
• Regular security audits and vulnerability assessments
• Database backups and disaster recovery procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

Data Retention

We retain different types of data for varying periods:

• Account Data: Retained for the duration of your active subscription and a reasonable period after account closure for legal and audit purposes.
• Customer Data: You control retention of contact information, conversations, and messages through our platform. You can delete data at any time, and we will permanently remove it within 30 days.
• Campaign Data: Broadcast and template data is retained for analytics and reporting purposes while your account is active.
• Backup Data: Deleted data may persist in backups for up to 90 days before permanent deletion.

When you close your account, all your data and customer data will be permanently deleted according to our data retention schedule, unless retention is required by law.

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access to your personal information
• Correction of inaccurate data
• Deletion of your personal information
• Restriction of processing
• Data portability
• Objection to processing
• Withdrawal of consent

To exercise these rights, please contact us at hello@jetto.chat.

Cookies and Tracking

Jetto Chat uses cookies and similar technologies:

• Authentication Cookies: HttpOnly cookies to maintain your login session securely (auth_token).
• Functional Cookies: To remember your preferences and settings.
• Analytics Cookies: To understand how you use the platform and improve user experience.

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of Jetto Chat.

Third-Party Services

Jetto Chat integrates with and relies on the following third-party services:

• WhatsApp Business API (Meta): For message delivery and WhatsApp integration. Subject to Meta's privacy policies and WhatsApp Business terms.
• DigitalOcean Spaces: For secure media file storage. Subject to DigitalOcean's privacy policy.
• Payment Processors: For subscription billing and payment processing.

We are not responsible for the privacy practices of these third-party services. We recommend reviewing their privacy policies before using Jetto Chat.

Data Processing and Your Responsibilities

When you use Jetto Chat, we act as a data processor for your customer data, and you act as the data controller. This means:

• You own and control all customer data you upload to our platform
• You are responsible for ensuring you have the legal right to collect and process this data
• You must comply with applicable data protection laws (GDPR, CCPA, etc.) in your jurisdiction
• You can export or delete your customer data at any time through our platform
• We process your customer data only according to your instructions and for the purposes of providing our service

WhatsApp Business Compliance

As a WhatsApp Business API platform, we help you comply with WhatsApp's policies:

• You are responsible for obtaining proper consent from your customers before messaging them via WhatsApp
• You must comply with WhatsApp Business messaging policies and template guidelines
• You should respect opt-out requests and customer communication preferences
• You are responsible for the content of messages sent through our platform

Jetto Chat provides tools to help you manage consent and compliance, but ultimate responsibility rests with you as the WhatsApp Business API user.

Children's Privacy

Jetto Chat is a business platform not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: hello@jetto.chat
• Website: jetto.chat