Privacy Policy
Last updated 15 November 2026
PT Brokeret Fintech Solutions · NIB: 2407260111091 · NPWP: 1000 0000 1050 1663
1. Who we are
Chatyol is owned and operated by PT Brokeret Fintech Solutions (NIB 2407260111091, NPWP 1000 0000 1050 1663), "Chatyol", "we" or "us". This Privacy Policy explains how we handle personal information. We are the data controller for information about visitors to chatyol.com, people who contact us or sign up, and the users of our customers' accounts. We are a data processor for the chats our customers have with their own website visitors: there, our customer is the controller and we act on its instructions, as described in section 3.
2. Information we collect about you
We collect only what we need to run our website and our service:
- Contact details, such as your name, company and email address, when you contact us or ask to get started
- Account details for the people who use Chatyol: name, email, role, workspaces, and a password stored only as a secure hash
- Billing details, such as plan and invoices, once billing starts
- Technical data, such as IP address, browser and device, in server and security logs
- What you tell us in emails, chats and support requests
3. Chats on our customers’ websites
When a business adds the Chatyol widget or hosted chat page to its website, that business is the controller of its visitors’ information and we are its processor. For that information:
- It can include the messages and files a visitor sends, the name, email and phone they give, details the business passes with identify, and technical details such as approximate location from the IP address, browser, device, language, referring page and pages viewed
- Voice calls, where a business turns them on, connect the visitor and the agent through Cloudflare Realtime. We do not record calls
- We process it only to provide, secure and support the service, and on our customer’s instructions
- Files are kept in private storage and opened only through signed links that expire
- We do not sell it, use it for advertising, or use one customer’s data for another customer
If you chatted with a business that uses Chatyol and want to see, correct or delete what you sent, please contact that business first. We will help them answer you.
4. AI features
When an agent uses AI assist, or when live translation is on, the text needed for that request (for example the recent messages of a chat) is sent to an AI provider to produce a suggestion, a summary or a translation. Everything AI writes is marked as such, and an agent decides what is sent to the visitor. We use AI providers under terms that do not allow them to train their models on this data.
5. How we use information
We use the information we collect to:
- Provide, run and improve the service
- Answer your enquiries and give support
- Keep our website and service secure and prevent misuse, such as spam in chats
- Send service emails, such as invitations, password resets, chat transcripts a visitor asks for, replies to visitors who left an email, and alerts your team set up
- Meet our legal, tax and accounting obligations
6. Legal bases
Where the law requires a legal basis, we rely on: performing our contract with our customers or taking steps before one; our legitimate interests in running, securing and improving our service, balanced against your rights; consent where it is required; and compliance with legal obligations. For chats on customers’ websites, the customer chooses the legal basis.
7. Sub-processors
We use these service providers to run Chatyol. Each processes information only for us, under contract:
- Cloudflare: hosting of the app, widget and API, live connections, file storage, voice calls (Cloudflare Realtime) and custom domains
- PlanetScale: the database
- Resend: sending emails
- Anthropic and OpenAI: AI suggestions, summaries and translation, only when those features are used
We will update this list before adding a new sub-processor that handles chat data.
9. Security
We protect information with encryption in transit (HTTPS and secure websockets), hashed passwords, encrypted storage of provider keys, private file storage with signed links, access controls by role and workspace, and an audit log. No system is completely secure, so please tell us at once if you notice anything suspicious.
10. Retention
We keep personal information only as long as we need it for the purposes above. Chat data is kept while the customer’s account is active and deleted after the account ends, as set out in our Terms of Service. Enquiries are kept for up to 2 years. Billing records are kept for as long as the law requires.
11. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you
- Have inaccurate information corrected
- Have your information deleted
- Object to or restrict how we use it
- Receive your information in a portable format
- Withdraw consent you gave us
To use any of these rights, email privacy@chatyol.com. We may need to confirm your identity first. You can also complain to your local data protection authority.
12. International transfers
We and our providers may process information in countries other than yours. Cloudflare runs a global network, and our other providers run servers in several regions. Where we transfer information, we use appropriate safeguards, such as contracts that protect it.
13. Children
Chatyol is a service for businesses and is not directed at children. We do not knowingly collect personal information from children for our own purposes.
14. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version on this page with a new date, and tell customers about material changes by email.
15. Contact
If you have questions or concerns about this Privacy Policy, contact us at:
Email: privacy@chatyol.com