Privacy statement
The Dutch version of this privacy statement is the authoritative one.
Chimy answers calls and WhatsApp messages for business owners. To do that we process personal data of the businesses that use us and of the customers who contact them. Below you can read which data that is, why we need it and what your rights are.
What data we process
From the business owner who creates an account: company name, email address, WhatsApp number, service area, services, working hours and payment details through our payment provider.
From the customer who gets in touch:
- name, as far as it is shared;
- phone number, and email address if it is sent along;
- the description of the request, the address or location if needed, and when it suits;
- the full transcript of the WhatsApp conversation with the assistant.
What we use it for
We use the data to answer and summarise the customer's request, book an appointment inside the business owner's availability and notify the business owner. The owner sees the conversation in their dashboard and can take it over at any time.
The legal basis is the performance of the contract with the business owner and the legitimate interest of both owner and customer in getting a request handled quickly. We do not use conversations for advertising and we do not sell data on.
Who processes the data on our behalf
We work with a small number of processors. A data processing agreement is in place with each of them.
- Twilio — provides the connection to WhatsApp (owned by Meta) and the telephony for missed calls. Messages and phone numbers travel through Twilio and through WhatsApp.
- Anthropic — provides the language model the assistant answers with. The content of the conversation and the business profile are sent to Anthropic to generate a reply. Anthropic does not use this data to train models.
- Stripe — handles the business owner's subscription and payment.
- Resend — sends the confirmation emails to the business owner.
- Vercel and Supabase — host the application and the database inside the European Union.
How long we keep it
We keep conversation transcripts for twelve months; after that the messages are deleted automatically. Lead and appointment data is kept for as long as the account exists, so the business owner can find their own records. If the owner cancels, we delete the account and the data that belongs to it, apart from what we are legally required to keep for our financial records (seven years).
Your rights
Under the GDPR you have the right to access your data, to have it corrected or deleted, to have the processing restricted, to object to the processing and to receive your data in a portable format. You can send a request by email; we respond within four weeks.
Are you a customer who received a WhatsApp message from the assistant and would rather not get any more? Send “STOP” in the conversation. You get one confirmation and after that never another message from that business through us.
If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Contact
Questions about this statement or about your data? Email privacy@chimy.nl. As the customer of a business that uses Chimy you can also go directly to that business; the business is the controller for the conversation you have with the assistant.