Privacy Policy

ChatFairy (“we”, “us”) provides an AI chatbot platform that lets businesses connect WhatsApp and Telegram, train an AI assistant on their business knowledge, and handle customer conversations, bookings, and payments. This policy explains what we collect and how we use it — both for businesses that sign up for ChatFairy and for their customers whose messages pass through the platform.

Service operator

ChatFairy is co-authored and legally owned by UseFool Technology Limited (Hong Kong) and Shanghai Kelin Technology Co., Ltd. The Service is operated by Kelin Studio (kelin.studio). For the purposes of data protection law, the operator is the data controller.

1. Information we collect

• Account data — email, name, and avatar you provide when you register or sign in.
• Business data — organizations, memberships, roles, and the knowledge base you create: business details, products, services, FAQs, and marketing content used to train your assistant.
• Conversation data — messages your customers exchange with your connected WhatsApp or Telegram channels, including the channel-native identifiers (phone number or chat id) needed to deliver replies.
• Payments and bookings — transaction records (amounts, references, status) and appointment bookings made through your assistant. Card details are collected and processed by Stripe, never by us.
• Calendar data — if you connect Google Calendar, availability (free/busy) and the events we create for confirmed bookings. OAuth tokens are stored encrypted.
• Technical data — IP address, browser/user agent, and session metadata used for security and audit logging.

2. How we use information

To provide and secure the Service: authenticating you, enforcing organization access, generating AI responses to customer messages using your business knowledge, processing payments and bookings, sending transactional emails (welcome, receipts, booking confirmations, handoff alerts), maintaining an audit log of security events, and preventing abuse. We do not sell personal data or use your business content to advertise to third parties.

3. AI processing

Customer messages and relevant excerpts of your knowledge base are sent to our AI provider (Anthropic) to generate responses. This processing happens on our behalf to power your assistant; we do not use your data to train foundation models.

4. Cookies

We use strictly necessary cookies to keep you signed in (Supabase auth session cookies). These are essential and cannot be disabled while using the Service. We do not set advertising cookies.

5. Service providers

• Supabase — database, authentication, and storage.
• Anthropic — AI model powering assistant responses.
• Meta (WhatsApp Business) and Telegram — message delivery on the channels you connect; subject to their own terms.
• Stripe — subscription billing and, via Stripe Connect, payments your customers make to you.
• Google — calendar availability and booking events, when you connect Google Calendar.
• Resend — transactional email delivery.
• Vercel and Upstash — hosting and rate limiting.

6. Your rights

You can access and update your data, export a copy, and permanently delete your account at any time from your profile settings. Depending on your region (e.g. GDPR/CCPA/PDPA), you may have additional rights; contact us to exercise them. If you are a customer of a business using ChatFairy, that business controls your conversation data — direct requests to them and we will assist.

7. Data retention & security

We retain data for as long as your account is active. Each business’s data is isolated at the database layer with row-level security, and channel credentials and calendar tokens are stored encrypted. When you delete your account, your personal data and any organizations you solely own are removed; transaction records may be retained where required for financial compliance.

8. Changes & contact

We may update this policy; material changes will be communicated through the Service. Questions? Contact us at support@chatfairy.chat.