Privacy policy
Chanlytics is a receptionist for small businesses: it answers a business's customers on WhatsApp, by phone and by text, keeps the conversations where the owner can read them, and helps the owner reply to reviews, answer email from their own mailbox and reach customers who asked to hear from them. This policy says what we hold to do that, why, who else touches it, and what you can do about it.
Who we are
Chanlytics ("we", "us") operates the Chanlytics app at app.chanlytics.com, and the site at chanlytics.com. When a business ("the workspace owner") signs up, it is the controller of its customers' data; we process that data on its behalf and under its instructions.
- Legal entity: RJ Capital LLC, trading as Chanlytics
- Address: 193 Jamaica Ave, Brooklyn, NY 11207, United States
- Email: hi@chanlytics.com
- Phone: +1 (917) 574-6416
Questions about this policy, and requests about your own data, go to either of those.
What we hold
- Account data: the owner's name and work email, the team members they invite, the business's name, address, hours, services and the facts the receptionist answers with.
- Conversations: messages customers send to the business's connected numbers and the replies sent back, call transcripts and, where the owner enables it, call recordings, together with the phone number or account that sent them.
- Customer records: the people who wrote or called, their number, the name they gave, whether they said yes to offers and when, and notes the owner adds.
- Connected services: what a connected service tells us — a WhatsApp number's status, a phone line's state, a Google Business Profile's reviews and the replies posted to them, the events in a calendar feed the owner pastes, and a connected mailbox's email, contacts and calendar.
- Billing: the plan, the subscription's status and the card's brand and last four digits. Card numbers never reach us; Stripe holds them.
- Usage: sign-ins, the actions taken in the product, and the technical logs needed to keep it working and secure.
Why we hold it
- To answer the business's customers, on the channels the owner connected, within the rules the owner set.
- To show the owner what was said and done, and to let a person take over a conversation.
- To send offers the owner asked us to send, only to people who agreed to receive them, with a way to stop at any time.
- To send, from the owner's own connected mailbox, the emails the owner writes or approves. A first email to another business always carries a way to stop hearing from it.
- To bill the workspace, to secure the service, and to meet legal obligations.
We do not sell personal data, and we do not use a workspace's conversations to advertise to anyone.
Automated replies
The receptionist's replies are drafted by an AI model from the business's facts and the conversation. The owner decides how much it may do on its own; a person can read, correct and take over at any time. Conversations may be sent to the AI model providers named below to produce a reply; they process them to provide the service and do not use them to train their models.
Who else processes it
We use the following services to run the product. Each holds only what its part needs.
- Supabase (database and sign-in), Google (sign-in with a Google account, when you choose it: we receive your name and the address you signed in with, nothing else), and Vercel (hosting).
- Meta (WhatsApp Business Platform) for WhatsApp messages and templates.
- Twilio for phone numbers and text messages, and Retell for phone calls.
- Google (Business Profile and Maps) for reviews and replies, and Google (Gmail, Contacts and Calendar) for a mailbox, when the owner connects them.
- Anthropic and OpenAI for the receptionist's drafts.
- Stripe for billing, and Resend for the emails we send you.
Google user data
Business Profile. When a workspace owner connects a Google Business Profile, we ask Google for permission to manage that business's listings. We use it to read the business's reviews, to show them to the owner, and to post the replies the owner writes or approves.
A mailbox. When an owner connects a Google Workspace mailbox, we ask Google for permission to send and read its email and, where the owner leaves them ticked, to read its contacts and its calendar:
- Email: we send from the mailbox the emails the owner writes, approves or schedules in Chanlytics, and we read its email with people, the last six months and then as it arrives, so the conversations, the replies and the bounces show in the workspace. Mail that marks itself as automated, such as newsletters and auto-replies, is set aside and not kept.
- Contacts: the mailbox's contacts are added to the workspace's people. Being in a contact list never counts as agreeing to receive offers.
- Calendar: its events, from 180 days back to 90 days ahead, show the business's appointments, its free times and each person's past appointments.
To draft a reply to an email, its text goes to the AI model providers named above, which process it only to write the draft. Nothing leaves the mailbox unless the owner wrote, approved or scheduled it.
We store the access Google grants in a vault the product's pages cannot read, so the connection keeps working. When the owner disconnects a Business Profile or removes a mailbox, we stop using it and delete that access; for a mailbox we also revoke it at Google. What a mailbox already brought in stays in the workspace, like its other records, until the owner deletes it or the workspace.
Chanlytics' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. For the data we receive from Google, that means:
- We use it only to provide the features described here, which the owner can see and turn off.
- We transfer it to no one except the services named in this policy, to run those features, or where the law requires it.
- We never use it for advertising, and we never sell it.
- No one at Chanlytics reads it unless the owner asks us to look at specific messages, it is needed for security, or the law requires it.
- We do not use it to develop, improve or train generalized AI or machine-learning models, and neither do the AI model providers that write drafts for us.
Text messages
A business’s customers receive texts only when they contacted the business first, or when they separately agreed to receive them. Messages about a customer’s own appointments and promotional messages are asked for separately, and either can be declined without affecting the other. Message and data rates may apply. Message frequency varies. Reply STOP to stop and HELP for help. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes; all other categories of sharing exclude text-messaging originator opt-in data and consent, which will not be shared with any third parties.
How long we keep it
Call audio is kept for 90 days and then removed; transcripts stay with the conversation. Webhook receipts, delivery logs, unplaced messages and model-usage rows are kept for 30 days. Assistant threads untouched for 90 days, and notifications after 90 days, are removed; the sweeps' run history is kept for 14 days and rate-limit counters for 2 hours. Leads nobody has worked are set aside after 90 days and their details removed after 180; places a search left out lose their details after 30 days, and the finder's reasons for a batch of places are removed after 180. A Google review is kept while Google shows it: one it no longer lists is removed at the next full read, and any review is removed 90 days after we last saw it. A team invitation that was accepted or taken back is removed 30 days later, with the address on it, and the address a workspace was handed over to is cleared once its new owner accepts. Background jobs, which carry a message while it is sent, are removed 7 days after they finish, or 90 days after they fail. Messages, call reports, delivery receipts and billing notices, as each provider sent them to us, are kept for 7 days so they can be replayed after a fault. What a change made in the dashboard answered is kept for a day, so the same change sent twice is made once. How fast each page loaded, with no person or workspace attached, is kept for 30 days, and what each model call cost for 400 days. What the receptionist was shown when it wrote a reply, and what it answered, is kept for 30 days, and the instructions it was given for 400 days after they were last used. A workspace's settings as they stood before a change are kept for 400 days after the change. A voice conversation's session, which holds nothing of what was said, is removed the day after it expires. Everything else stays while the workspace exists. An owner can download a copy of a workspace’s records from Settings › Billing: its people, conversations and the files customers sent, calls, consent history, notes, deals, bookings, campaigns, lists, the team and the business’s own details. The file names what it leaves out and why, such as call audio and the connections that hold a provider’s credentials; an owner can ask us for anything else, and ask us to delete the workspace, after which its data is removed within 30 days, except what the law requires us to keep.
Your rights
You can ask what we hold about you, ask for it to be corrected or deleted, and object to how it is used, by writing to hi@chanlytics.com. Deleting your data says exactly how deletion works for an owner and for a business’s customer. If you are a customer of a business that uses Chanlytics, the business is the controller of your data; we will pass your request to it and help it answer. Its owner can download one file of the records it keeps about you, which names what it leaves out and why.
Security
Data travels encrypted and is stored encrypted at rest. Credentials for connected services are kept in a vault the product's pages cannot read. Access inside Chanlytics is limited to what running and supporting the service requires.
Changes
When this policy changes, the date above changes with it and workspace owners are told in the product.
Chanlytics · Deleting your data · Terms of service · Sign in · chanlytics.com