Privacy Policy

1. Information We Collect

We collect the following types of information when you use Chat33:

1.1 Account Information

When you create an account, we collect your name, email address, password (stored in hashed form), and any optional profile information you choose to provide. If you sign up through a third-party service (such as GitHub), we receive basic profile information from that provider.

1.2 Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, actions taken, timestamps, browser type, operating system, IP address, and device identifiers.

1.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and understand how you use the Service. See Section 7 for more details on our cookie practices.

1.4 Third-Party Platform Data

When you connect your social media accounts to Chat33, we access and process data from those platforms as authorized by you and as necessary to provide the Service. This includes:

• TikTok: Profile information (username, follower count, video count), video performance metrics (views, likes, comments).
• YouTube: Video performance metrics (views, likes, comments) via YouTube Data API Services.
• Instagram: Messaging data, media performance metrics (reach, likes, comments), and profile information.

We do not store the content of messages sent through connected platforms beyond what is necessary for service delivery and analytics.

1.5 Financial Data

• Stripe Connect: We facilitate payouts to influencers via Stripe Connect. Bank account details are handled entirely by Stripe and never stored on our servers. We store payout amounts, transaction history, and earnings records.
• Campaign Funding: We process campaign funding via Stripe. Payment details are handled by Stripe. We store campaign funding amounts and transaction records.

2. How We Use Information

We use the information we collect for the following purposes:

2.1 Providing and Improving the Service

• Operating, maintaining, and improving Chat33
• Processing your automated messaging workflows
• Managing your account and providing customer support
• Developing new features and functionality
• Processing campaign participation and content tracking
• Calculating and processing influencer payouts
• Verifying video performance metrics across platforms

2.2 Analytics

• Understanding how users interact with the Service
• Generating aggregated, anonymized usage statistics
• Identifying trends and optimizing performance

2.3 Communication

• Sending transactional emails (account verification, password resets, billing notifications)
• Providing product updates and announcements (with opt-out available)
• Responding to your inquiries and support requests

3. Data Sharing

We do not sell your personal data. We may share your information only in the following limited circumstances:

• Infrastructure Providers: We use third-party cloud hosting and infrastructure services to operate the Service. These providers process data on our behalf under strict contractual obligations.
• Payment Processors: We use third-party payment processors to handle subscription billing. These processors receive only the payment information necessary to complete transactions and are subject to PCI DSS compliance requirements.
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to the same privacy protections described in this policy.
• Stripe: Payment processing and influencer payouts via Stripe Connect. Stripe receives the financial information necessary to process transactions and payouts.
• TikTok: API access for video performance metrics, authorized by the user upon connecting their TikTok account.
• YouTube/Google: API access for video performance metrics via the YouTube Data API, authorized by the user upon connecting their YouTube account.

4. YouTube API Services

Chat33 uses YouTube API Services. By connecting your YouTube account to Chat33, you agree to be bound by the Google Privacy Policy.

YouTube data accessed by Chat33 includes:

• Video view counts
• Like counts
• Comment counts

You can revoke Chat33’s access to your YouTube data at any time via Google Security Settings.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. Specifically:

• Active accounts: Data is retained for the duration of your account’s existence.
• Account deletion: Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention or financial record-keeping).
• Usage logs: Aggregated and anonymized usage data may be retained indefinitely for analytical purposes.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: You have the right to request a copy of the personal data we hold about you.
• Correction: You have the right to request correction of inaccurate or incomplete personal data.
• Deletion: You have the right to request deletion of your personal data, subject to certain legal exceptions.
• Data Export: You have the right to request a portable copy of your data in a commonly used, machine-readable format.
• Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.
• Non-Discrimination (CCPA): We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, please contact us at contact@chat33.io. We will respond to your request within 30 days.

7. Cookies

We use the following types of cookies:

• Essential Cookies: Required for the Service to function properly. These include session cookies, authentication tokens, and security-related cookies. These cookies cannot be disabled.
• Analytics Cookies: Used to understand how visitors interact with the Service. These cookies are only set with your explicit consent and can be disabled at any time through your browser settings or our cookie preferences.

We do not use advertising or third-party tracking cookies. You can manage your cookie preferences through your browser settings. Note that disabling essential cookies may impair the functionality of the Service.

8. International Data Transfers

Chat33 is operated by Nitrotech Inc. from the United States. Your data is processed and stored on servers located in the United States.

If you are accessing the Service from outside the United States, please be aware that your data will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on appropriate legal mechanisms for data transfers, including Standard Contractual Clauses (SCCs) as approved by the European Commission, to ensure adequate protection of your data.

9. Children’s Privacy

Chat33 is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to promptly delete such information.

If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at contact@chat33.io so that we can take appropriate action.

10. Security Measures

We implement industry-standard security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: All data in transit is encrypted using TLS 1.2 or higher. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: We enforce role-based access controls, multi-factor authentication for internal systems, and the principle of least privilege for all employees and contractors.
• Regular Audits: We conduct regular security assessments, vulnerability scans, and penetration testing to identify and remediate potential security risks.
• Incident Response: We maintain an incident response plan and will notify affected users of any data breach within 72 hours of discovery, as required by applicable law.

While we take extensive precautions to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the “Last updated” date at the top of this page. For significant changes, we may also provide additional notice through email or in-app notifications.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.

12. Contact for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: