Privacy Policy

Last updated: October 6, 2026 | Effective date: October 6, 2026

At IchiDesk ("we," "our," or "us"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our multi-channel customer support SaaS platform, and integrate third-party messaging channels (including WhatsApp Business API, Instagram Direct, and Facebook Messenger).

1. Information We Collect

We collect information that you provide directly to us when registering an account, configuring your workspace, connecting messaging channels, or communicating with customer support.

  • Account & Business Information: Name, business name, email address, password, phone number, and billing details.
  • Meta & Messaging Integration Data: Authorized tokens, page IDs, WhatsApp Business Account (WABA) IDs, phone number IDs, and metadata necessary to manage customer conversations.
  • Customer Communications & Content: Contents of messages, media attachments, contact details of your end-users, and ticket history across WhatsApp, Instagram, and Messenger.
  • Technical & Usage Data: IP address, browser type, operating system, referral URLs, page views, and interaction timestamps.

2. How We Use Your Information

  • Providing and Maintaining the Service: Operating your IchiDesk SaaS instance and synchronizing messaging streams.
  • Processing Meta Integrations: Facilitating OAuth redirects, managing webhooks, and executing automated workflows or AI responses.
  • Customer Support & Communications: Responding to inquiries, sending administrative updates, security alerts, and billing notifications.
  • Platform Security & Compliance: Monitoring unauthorized access, mitigating abuse, and enforcing terms.

3. Data Security & Protection

We implement robust security measures. All sensitive credentials, API secrets, and access tokens are protected using AES-256 encryption at rest and transferred via secure HTTPS protocols in transit. Database connections and server configurations are restricted using multi-tenant isolation layers.

4. Sharing of Information

We do not sell, trade, or rent your data. We share information only with trusted service providers assisting our operations, with Meta Platforms, Inc. as required for your channel integrations, or when required by legal obligations.

5. Data Retention and Deletion

We retain data as long as your subscription is active. You may request account deletion at any time, upon which we will purge or anonymize your personal data from active databases.

6. Your Data Protection Rights

You have the right to access, correct, or request erasure of your data, as well as the right to disconnect your Meta channels or revoke API access tokens at any time through your dashboard or Meta Business settings.

7. Contact Us

If you have any questions regarding this Privacy Policy, please contact our legal and compliance team through our platform at https://ichidesk.com.