Privacy policy

1. Who we are

ZeltaCode Chat is run by ZeltaCode Ltd, which is responsible for the personal data described here. Contact: info@zeltacode.com.

2. Chat messages are not stored here

Messages, photos, files and voice notes sent in your app are stored and delivered by your own app's server. This service never receives them. The app owner decides how that data is handled and is responsible for it towards their users.

3. What we keep

• Your account: name, e-mail address, password (only as a secure hash) and your role.
• Your plan and payments: plan, subscription status, billing periods and the Stripe ids of your customer, subscription and invoices. Card details are handled by Stripe and never reach us.
• Your Messaging API key: only a hash, the first characters and the last four, so we can show which key is active.
• Your apps and usage: the installation id, app id and app name of each app that uses your key, and daily numbers per app (how many people used chat, how many messages were sent). No names or content of your app's users.
• Security records: a log of key rotations, app unbinding and admin actions on your account, with the IP address the action came from; short-lived counters per IP address for rate limits (a few minutes); and technical logs.

4. Why we use it

To run your account and plan (contract), to bill you (contract and legal obligations), to protect the service against misuse, for example with rate limits (legitimate interest), and to answer your questions. We do not sell personal data and do not use it for advertising.

5. Where it is stored and who receives it

The service runs on servers in the EU. Payments are processed by Stripe, which acts under its own privacy policy. Our hosting and e-mail providers process data on our behalf. The site loads no fonts, scripts or trackers from other services.

6. How long we keep it

• Daily usage numbers: 13 months.
• Security records (audit log with IP addresses): 12 months. Technical logs: 14 days.
• Account, plan and key data: as long as your account exists.
• Payment records: as long as tax and accounting law requires.

7. Your rights

You can see and correct your account details on your profile page and delete your account there. You can also ask us for a copy of your data, to correct or delete it, or to restrict or object to its use. You may complain to your data protection authority.

8. Cookies

We use only the cookies needed to keep you logged in and to protect forms. There are no tracking or advertising cookies.

9. Changes

We update this policy when the service changes; the date at the top shows the latest version. See also our terms of service.