Privacy Policy

1. Who this policy covers

Two different groups of people are involved in Chatonaut, and our role is different for each.

• Customers — the businesses and people who create a Chatonaut account and connect their own channels. For account data, the data controller is Individual Entrepreneur Dmitrii Yuryevich Kiselev: that is who decides what we collect and why. Section 13 has the full contact details.
• End users — the people who write to a chatbot that a Customer built. For those messages and profile data, the Customer is the controller and we are a processor: we handle the data on the Customer's instructions, in order to run their bot.

If you wrote to a chatbot and want your data corrected or deleted, ask the business you were chatting with — the data is theirs to control. We will help them act on your request. Our Data Deletion page explains the steps.

2. Information we collect

Account information

When you create an account we collect your name, your email address and a password. The password is stored only as a secure hash, so we never see it. We also store your interface language, the plan each of your channels is on, and whether you agreed to receive product emails.

Channel connections

When you connect a channel we store what is needed to run it: a Telegram bot token, the access token and the account identifier that Meta issues when you connect an Instagram account, and the domain where you install the website chat widget.

What we handle on your behalf

To run your bots we receive and store the messages, comments and story replies that people send to your connected channels. Alongside each one we store the sender's identifier on that platform, the public profile details the platform gives us (such as a username, display name or profile picture), any media the person sends, and whatever your automations save about them — tags, notes, variables and saved answers. If your bot asks people for contact details, such as an email address or a phone number, we store those too.

Usage and technical data

We keep server logs: your IP address, timestamps and the actions taken in the app. We also set the cookies needed to sign you in and keep the app working, and we use a web analytics service to see which features people actually use. Its session recording is switched off on the screens that show conversations and end-user contact details. Our Cookies Policy has the detail.

Payment information

We do not collect payment information. Chatonaut is free to use during our early launch: there is no checkout, no payment provider, and nothing is charged to you. The prices shown on our website are indicative — they show where we are heading, not what you owe. If we start selling paid plans, we will update this policy before anyone is charged and say who processes the payment.

3. Meta Platform Data (Instagram)

Instagram is the only Meta channel Chatonaut connects to: we use Instagram Login, and there is no Facebook page or Messenger integration. When you connect an Instagram account, we access information through Meta's APIs only to run the features you switch on: receiving and replying to direct messages, comments and story mentions, and reading the basic profile information of the people who contact you so that your team and your automations can answer them.

We use this Platform Data for those features and nothing else. We do not sell it, we do not use it for advertising or to build advertising profiles, and we do not share it with anyone except the service providers listed in section 6, who help us run Chatonaut.

We follow the Meta Platform Terms and the Meta Developer Policies, including the rules on when a message may be sent — for example the standard 24-hour messaging window.

You stay in control of the connection. You can disconnect the account inside Chatonaut at any time, or remove our app in your Instagram settings — Instagram lists it under the name of the Meta app we connect through, not under Chatonaut, and our Instagram Data Deletion page shows you exactly what to look for. Either way, we delete the Platform Data tied to that connection. See Data Deletion.

4. How we use information

• To run the service — deliver, route and store messages; run your automations; generate replies when you enable an AI agent; and power the shared inbox, broadcasts and analytics.
• To keep the platform working and safe — sign you in, stop spam and abuse, fix bugs, and keep the service reliable.
• To talk to you — service and account messages, and product emails if you asked for them. You can opt out of product emails at any time, and we will still send the service messages your account depends on.
• To meet legal obligations — where the law requires it of us.

If you are in the United Kingdom or the European Economic Area, the law asks us to name a legal basis for each use. Ours are: performing our contract with you, which covers running the service you signed up for; your consent, for product emails and anywhere else consent is required; and our legitimate interest in keeping Chatonaut secure and working well.

5. AI features

AI features are off until you switch them on. When you turn on an AI agent, the AI copilot or a block that generates media, we send the content that feature needs — the message being answered, and the knowledge you gave the agent in the form of documents, links and instructions — to the provider that powers it.

Today those providers are OpenAI for text and Replicate for generated images and audio. We use their business APIs, and under the terms of those APIs the content we send is not used to train their models. We do not train any model of our own on your content.

6. How we share information

We do not sell personal information. We share it only in these three ways.

• Service providers — a short list of companies that help us run Chatonaut: cloud hosting and infrastructure; the messaging platforms you connect, namely Meta and Telegram, which your messages necessarily pass through; our AI providers, when you enable AI; an email provider that delivers account and notification emails; and a web analytics provider that shows us how the app is used. They may use the data only to provide their service to us. Ask us and we will send you the current list.
• Law and safety — when the law requires it, or to protect the rights, safety and integrity of Chatonaut, our Customers and the public.
• Business transfers — if Chatonaut is ever part of a merger, acquisition or sale of assets, data may move with it. We will tell you if that happens.

7. How long we keep data

We keep your account information for as long as your account is open. We keep messages and the data around them so that your shared inbox, your automations and your analytics keep working, and you can delete individual conversations at any time.

When you disconnect a channel, we delete the data tied to that connection. When you close your account, we delete or anonymize your data within 30 days, apart from records we are legally required to keep. Copies may sit in secure backups for a short while longer before they are overwritten.

8. Your rights and choices

Depending on where you live, you have the right to see the personal data we hold about you, correct it, delete it, get a copy of it, restrict how we use it, or object to a particular use.

• For your Chatonaut account — most of this you can do in the app. For anything else, email us at support@chatonaut.com from the address on your account.
• If you are an end user — the business you contacted controls your data, so please ask them first. If you cannot reach them, write to us and we will help route the request and assist with it.

You can disconnect any channel, delete conversations and close your account whenever you want; Data Deletion walks through each step. We answer requests within 30 days and we do not charge for them. If you are in the United Kingdom or the European Economic Area and you are unhappy with our answer, you can complain to your local data protection authority.

9. Security

We encrypt data in transit, store passwords only as hashes, and limit access so that our own team sees only what the work requires. No system is perfectly secure, but protecting your data is part of running the service, not an afterthought.

10. International data transfers

Your data is stored in the European Union. Chatonaut runs on rented servers in the Netherlands, and that is where your account, your conversations and your automations live. We do not keep a second copy of it anywhere else.

Two things do reach Russia, and we would rather you read them here than find them yourself. The person who operates Chatonaut lives and is registered in Russia — section 13 has the details — and runs, maintains and supports the service from there, so the data on those servers is reached from outside the EU when the work requires it. And once you sign in, we measure how the app is used with Yandex Metrica, which processes that usage data on its own servers in Russia; our Cookies Policy explains what it collects and how to switch it off.

Some of the services we rely on to run the product—for example the AI models that write replies—operate from other countries, so a message sent to the AI agent leaves the EU while it is being answered. We pick these providers on how they protect data and on the transfer safeguards they offer, and we send them only what the feature needs.

If you want to know where a particular kind of data is stored, write to us and we will tell you.

11. Children

Chatonaut is a tool for businesses and is not aimed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us data, write to us and we will delete it.

12. Changes to this policy

We will update this policy as the service changes. The new version goes up on this page and the "Last updated" date above changes with it. When a change matters to you, we will make a reasonable effort to tell you rather than leave you to find it.

13. Who we are and how to reach us

Chatonaut is operated by Individual Entrepreneur Dmitrii Yuryevich Kiselev, a sole proprietor registered in Russia. An individual entrepreneur is the Russian legal form for a person who runs a business in their own name; it is not a company. For the account data described in this policy, that person is the data controller.

Privacy questions and requests go to support@chatonaut.com, and we answer within 30 days. You can also write to the registered address above.