Version v1 · Last updated 8 October 2026

Privacy Policy

Draft — not legal advice. This document is a baseline prepared for internal review. Have it reviewed by qualified legal counsel before presenting it to customers.

1. Who processes your data

HopeTech Solutions Ltd(Uganda) operates HopeChat and acts as the controller (and, where you use the Service to manage your own customers' data, as a processor acting on your behalf). Contact: info@hopechat.net · +256 763 149 276.

2. Data we collect

  • Account data: your name, email address, phone number, business name, and role/permissions within your workspace.
  • Content you add: contacts, conversation messages, templates, uploaded documents, tags, automation configuration, and settings.
  • Connection metadata: for sessions — IP address, approximate location (city/country derived from IP), device and browser information, and pages visited. This is collected for security, support, and abuse prevention.
  • Payment information: transaction references and amounts when you pay through Pesapal. We do not store full card numbers — card details are handled by the payment provider.
  • Usage data: product usage, activity events, and diagnostic logs used to operate and improve the Service.

3. How we use your data

  • Provide, operate, and secure the Service;
  • Send WhatsApp and SMS messages on your behalf through the official WhatsApp Business API and your SMS gateway;
  • Answer customer questions using AI (see section 5);
  • Process payments and manage credits;
  • Provide support, detect abuse, and comply with legal obligations.

4. Legal basis

We process data on the basis of: your consent (which you may withdraw at any time); the performance of a contract with you; our legitimate interests in operating and securing the Service; and compliance with legal obligations. Where consent is required for your own end-customers' data (for example, WhatsApp opt-in), that is your responsibility as the account holder.

5. AI processing

HopeChat's AI assistant may send parts of a conversation (or your uploaded knowledge base and connected spreadsheet data) to an AI provider to generate a reply. We use Google Gemini. Where you have connected a Google Sheet, sheet data may be shared with the AI provider solely to answer live lookup questions. We do not sell your data to AI providers, and the provider is bound to use it only to generate responses. Messages sent to Meta's WhatsApp API are handled according to Meta's own policies.

6. Third parties we share data with

  • Meta / WhatsApp Business API: for messaging, per Meta's terms;
  • Google (Gemini, Google Sheets): for AI answers and spreadsheet integrations;
  • Pesapal: for payment processing;
  • Cal.com: for appointment booking;
  • SMS gateways: for bulk SMS delivery;
  • Hosting & infrastructure providers that store or transmit data on our behalf, bound by confidentiality.

We only share the minimum data each provider needs, and never sell personal data.

7. Data retention

We keep account and content data for as long as your account is active or as needed to provide the Service. Session location data is retained for a limited period for security purposes. Credit and payment records are kept to meet financial and tax obligations. You can request deletion of your data at any time (see section 10).

8. Security

We apply protections including encryption of data in transit and sensitive fields at rest, access controls, and monitoring of sessions for suspicious activity. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Cookies & local storage

We use essential cookies and local storage for authentication and session management, PWA installation, and to remember preferences. We do not use third-party advertising cookies.

10. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, withdraw consent, and object to or restrict processing. To exercise any of these rights, email info@hopechat.net. We respond within a reasonable period and will verify your identity first.

11. Changes to this policy

We will notify you of material changes — for example, by updating the version stamp, and, where our terms require consent, by asking you to accept the updated version. The version and last-updated date are shown at the top of this page.