Privacy Policy

Last updated: 18 October 2026

Chitthi (app.chitthi.live) is operated by Exaltes Global Private Limited, India ("we", "us"). Chitthi lets businesses ("customers") send and receive WhatsApp messages through the official WhatsApp Business Platform provided by Meta. This policy explains what we collect and how we use it.

What we collect

• Account data: name, email address, business name and a hashed password for each user of a customer.
• WhatsApp Business data: when a customer connects a number through Meta's Embedded Signup, we receive their WhatsApp Business Account ID, phone number ID, display number, verified name and an access token. Tokens are stored encrypted.
• Messages and contacts: messages sent and received on connected numbers, delivery statuses, and the phone numbers and profile names of the people our customers message.
• Billing data: subscription and payment status from Razorpay. We do not store card or bank details.
• Technical data: server logs such as IP address and request times, kept for security and troubleshooting.

How we use it

Only to provide Chitthi to our customers: delivering messages, showing conversations in the team inbox, running broadcasts the customer starts, billing, support, and keeping the service secure. We do not sell personal data and do not use message content for advertising.

Who we share it with

• Meta Platforms, to send and receive WhatsApp messages.
• Razorpay, to process payments.
• Our hosting provider (Hostinger), which stores the data on our behalf.
• Authorities, when required by law.

Customers and their contacts

For messages and contacts, the customer business decides what is sent and to whom, and we process that data on their behalf. People who receive messages from a business on Chitthi should contact that business first. Customers must collect opt-in consent before messaging people, as WhatsApp's policies require.

Retention and deletion

We keep data while the customer's account is active. When an account is closed, or on request, we delete account data, tokens, contacts and messages within 30 days, except records we must keep by law (such as invoices). See Data deletion.

Security

Data is sent over HTTPS, passwords are hashed, and WhatsApp access tokens are encrypted at rest.

Contact

Questions or requests: hello@chitthi.live