Summary: We collect only what we need to run the service. We do not sell your data. You can delete your account and all associated data at any time.

1. Who we are

livechat.bd ("we", "our", "the Service") is a customer messaging platform operated from Bangladesh. Our service allows businesses to manage customer conversations from multiple channels in one unified inbox.

If you have questions about this policy, contact us at privacy@livechat.bd.

2. Information we collect

Account data: When you register, we collect your name, email address and password (stored as a bcrypt hash). We also store your organisation name and plan details.

Conversation data: Messages, contact details and attachments sent through the platform are stored so agents can view and reply to them. This includes messages from your customers on all connected channels.

Website visitor data: When a visitor uses your chat widget, we store their IP address, browser user-agent and a session token. We do not track visitors across different websites.

Channel credentials: Access tokens for connected channels (Facebook, Telegram, WhatsApp, etc.) are stored encrypted in our database.

Usage data: We collect server logs including IP addresses, request paths and timestamps for security and debugging purposes. Logs are retained for 30 days.

3. How we use your information

To operate and improve the Service
To authenticate you and keep your account secure
To send transactional emails (account creation, password reset, billing alerts)
To route messages between your customers and your agents
To provide customer support when you contact us
To comply with legal obligations

We do not use your data for advertising, profiling or selling to third parties.

4. Data sharing

We share data with third parties only where necessary:

Infrastructure providers: Cloud hosting, database and Redis providers who process data on our behalf under data processing agreements.
Email delivery: For transactional emails only.
Stripe: For payment processing. We do not store full card numbers.
Platform APIs: Messages are transmitted through Meta (Facebook/Instagram/WhatsApp), Telegram and other APIs as required to deliver the Service.
Legal requirements: We may disclose data if required by law or to protect our legal rights.

5. Data retention

We retain your data for as long as your account is active. After account deletion:

Account and agent data is deleted within 30 days
Conversation and message data is deleted within 30 days
Billing records are kept for 7 years for legal/accounting purposes
Server logs are purged after 30 days

6. Security

We take security seriously:

All data is transmitted over HTTPS/TLS
Passwords are hashed with bcrypt
Channel access tokens are encrypted at rest
Access to production systems is restricted to authorised personnel
We perform regular security reviews

No system is 100% secure. If you discover a security vulnerability, please report it to security@livechat.bd.

7. Your rights

You have the right to:

Access a copy of your personal data
Correct inaccurate data via your account settings
Delete your account and all associated data
Export your conversation data (contact us to request)
Object to processing in certain circumstances

To exercise these rights, email privacy@livechat.bd. We will respond within 30 days.

8. Cookies

We use cookies for session management and CSRF protection. We do not use third-party tracking cookies. See our Cookie Policy for details.

9. Children

The Service is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, contact us immediately.

10. Changes to this policy

We may update this policy from time to time. We will notify registered users of material changes by email at least 14 days before they take effect. Continued use of the Service after that date constitutes acceptance.

Privacy Policy