Privacy Policy

Last updated: February 25, 2026

1. Introduction

HitzChat ("we", "our", or "us") operates the hitz.chat platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, including interactions through Facebook Messenger, Instagram Direct, LINE, and our web chat widget.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, phone number when you register.
  • Organization Information: Company name, business details.
  • Chat Messages: Messages exchanged through our platform channels (Facebook Messenger, Instagram Direct, LINE, web chat).

2.2 Information Collected Automatically

  • Usage Data: Browser type, device information, pages visited, IP address.
  • Messaging Platform Data: User IDs from messaging platforms (Facebook, Instagram, LINE), display names, and profile pictures as provided by those platforms.
  • Cookies: Session cookies and analytics cookies for improving our Service.

2.3 Information from Third-Party Platforms

When you connect your Facebook Page or Instagram Business Account to our Service, we receive page access tokens, page/account IDs, and public profile information of users who message your page. We use this data solely to facilitate messaging between your business and your customers.

3. How We Use Your Information

  • To provide, maintain, and improve our AI chatbot and customer service platform.
  • To process and respond to customer messages via connected channels.
  • To train and improve AI response quality using anonymized conversation data.
  • To send administrative notifications about your account and service.
  • To analyze usage patterns and optimize performance.
  • To comply with legal obligations.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

  • Service Providers: Third-party services that help us operate (e.g., OpenAI for AI processing, Supabase for data storage, Vercel for hosting).
  • Platform Partners: Meta (Facebook/Instagram), LINE Corporation — only as required to facilitate messaging.
  • Legal Requirements: When required by law, regulation, or legal process.

5. Data Retention

We retain conversation data for as long as your account is active or as needed to provide our services. You may request deletion of your data at any time through our Data Deletion page or by contacting us directly.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS/SSL), encryption at rest, access controls, and regular security audits to protect your information.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data.
  • Correct inaccurate data.
  • Request deletion of your data.
  • Restrict or object to data processing.
  • Data portability.
  • Withdraw consent at any time.

8. Facebook and Instagram Data

Our use of information received from Facebook and Instagram APIs adheres to the Meta Platform Terms. We only access the minimum data necessary to provide our messaging service. Users can revoke access at any time through their Facebook or Instagram settings.

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: