Privacy Policy — ChatToon
Sign Inเข้าสู่ระบบ

Privacy Policy

ChatToon — Multi-channel Chat Management Platform

Introduction

ChatToon ("we", "our", or "the Platform") is a multi-channel customer messaging management system that connects Facebook Messenger, LINE Official Account, and WhatsApp into a single inbox for business teams.

This Privacy Policy explains how we collect, use, and protect information when you use ChatToon, and when our platform receives messages from customers via connected messaging channels.

Scope: This policy applies to:
  • Workspace members (agents, managers, admins) who use ChatToon
  • End customers whose messages are received through connected channels (Facebook Messenger, LINE OA, WhatsApp)
Data We Collect
1. From Workspace Members (Agents / Admins)
  • Name and email address (via Google OAuth login)
  • Profile picture (from Google account)
  • Role and team assignment within the workspace
  • Last active timestamp
  • Messages sent through the platform to customers
2. From End Customers (via Messaging Channels)
  • Facebook Messenger: Page-Scoped User ID (PSID), display name, profile picture (when available via Meta Graph API)
  • LINE OA: LINE User ID, display name, profile picture
  • WhatsApp: Phone number, display name
  • Message content (text, images, stickers, files) sent by the customer
  • Timestamp of each message
  • Platform-specific metadata (message ID, delivery status)
3. Technical Data
  • Webhook event logs from Facebook, LINE, and WhatsApp
  • Server-side access logs for security and debugging
  • Conversation status history (open, waiting, resolved)
How We Use Data

We use collected data exclusively for the following purposes:

PurposeDetails
Display incoming messagesShow customer messages in the agent inbox so agents can read and respond
Customer identificationShow customer name and profile picture to help agents identify who they are talking to
Conversation managementTrack conversation status, assignment, tags, and notes for team coordination
Team performance reportingAggregate statistics for workspace admins (message counts, response rates)
Sending repliesTransmit agent replies back to customers via the respective platform API
Platform authenticationVerify webhook signatures to ensure only legitimate messages are processed
We do NOT: sell customer data, use it for advertising, share it with third parties beyond what is needed to deliver messages, or use it for any purpose other than operating the messaging platform.
Data Sharing

We share data only with the following parties, and only to the extent necessary:

  • Meta (Facebook/Instagram): To send and receive messages via Messenger API and verify webhook signatures. Governed by Meta's Platform Policy.
  • LINE Corporation: To send and receive messages via LINE Messaging API. Governed by LINE's Terms of Use.
  • WhatsApp (Meta): To send and receive messages via WhatsApp Business API.
  • Google: For OAuth-based login for workspace members only.
  • Hosting provider: Server infrastructure to store and process data securely.

We do not sell, rent, or trade customer data to any third party for commercial purposes.

Data Retention
  • Message history is retained as long as the workspace is active, to allow agents to view conversation history
  • Workspace members may request deletion of their account data at any time
  • Customer data received via messaging channels is retained for the duration the workspace is operational
  • Upon workspace deletion, all associated data is permanently removed from our servers
Security
  • All data is transmitted over HTTPS (TLS encryption)
  • Webhook payloads from Facebook and WhatsApp are verified using HMAC-SHA256 signature validation
  • API credentials (access tokens, secrets) are stored encrypted in the database
  • Access to data is restricted to authenticated workspace members only
  • Role-based access control limits what each user can view and do
Your Rights

If you are a workspace member or an end customer whose data has been received through our platform, you have the right to:

  • Access: Request a copy of your data held in our system
  • Correction: Request correction of inaccurate personal data
  • Deletion: Request deletion of your personal data
  • Objection: Object to the processing of your data for specific purposes

To exercise these rights, please contact us using the details below.

Contact Us

For privacy-related inquiries or data requests:

Platform: ChatToon
Website: https://chattoon.fastker.com
Email: kfctsx002@gmail.com
We aim to respond to all privacy requests within 30 days.