Privacy Policy

1. Controller and roles

The controller for Chatrigo account, billing, and site-usage data is PT Rigo Inovasi Digital, contactable at support@chatrigo.id. This policy is prepared based on Law Number 27 of 2022 on Personal Data Protection, Government Regulation Number 71 of 2019, and earlier data-protection rules to the extent they do not conflict with the PDP Law.

Chatrigo may occupy two different positions:

• Controller of Chatrigo account data — for example the business owner’s name, login email, billing data, and security logs.
• Processor of data that a customer business uploads or streams to Chatrigo to be processed on their instructions — for example WhatsApp or Instagram chats, phone numbers, and store knowledge. That contractual relationship is governed by theData Processing Agreement.

If you are an end customer of a business that uses Chatrigo, that business is generally the controller of your conversations. Requests about those conversations should be made to that business; we will assist in accordance with the DPA.

2. Data collected

We may process the following categories of data:

• Account data: name, email, phone number, business identity, team members, and credentials.
• Transaction data: plan, invoices, payment evidence, and subscription history.
• Data Customer uploads or streams: channel conversations, contacts, knowledge, attachments, and AI settings. This data is processed as Processor.
• Technical data: IP address, device type, access logs, and cookies needed for the site and application to function.

We do not knowingly collect children’s data to create a Chatrigo account.

3. Processing purposes

Data is processed to:

• provide, secure, and improve the service;
• authenticate, prevent abuse, and provide support;
• bill, run trials, and send account-related communications;
• meet legal obligations; and
• for Customer Data, carry out Customer’s instructions so AI and the inbox can function, including handoff to a human agent.

User content and customer data are not used to train general artificial-intelligence models.

4. Legal bases

Depending on context, processing bases include:

• consent, for example when registering or connecting a channel;
• performance of a contract to provide the service Customer requested;
• compliance with legal obligations; and
• balanced legitimate interests, for example system security, to the extent this does not override data-subject rights.

This information is provided so the controller can meet transparency obligations, including data types, purposes, retention, and data-subject rights.

5. Cookies and technical data

The site and application use cookies or local storage needed for login sessions, security, and basic preferences. We do not use those cookies to sell personal data. You may set your browser to refuse cookies, with the risk that some features will not work.

6. Retention

Account data is stored while the account is active and for a reasonable period after closure to settle invoices, disputes, backups, and legal obligations. Customer Data is stored as needed to provide the service according to Customer’s instructions, then deleted or returned under the DPA.

Technical backups may persist longer in a limited retention cycle, then be deleted automatically.

7. International transfers

Some processing is performed outside Indonesia through infrastructure, email, AI, or channel providers. Those transfers are made because they are necessary to provide the service, with reasonable safeguards, in accordance with Article 56 of the PDP Law.

Parties that process Customer Data on Chatrigo’s behalf are listed on theSubprocessor List.

8. Data-subject rights

Under the PDP Law, you may request the right to:

• obtain information and access data;
• correct or update data;
• end processing, delete, or destroy data as permitted by law;
• withdraw consent, where processing is based on consent; and
• object or complain to a competent authority.

For Chatrigo account data, send a request tosupport@chatrigo.id with adequate identification. We will follow up within a reasonable time. For conversations with a business, submit the request to that business as controller.

9. Third-party providers

We may use third-party service providers to help deliver our service. Parties that process Customer Data on Chatrigo’s behalf are listed on theSubprocessor List.

Channel providers such as Meta process messages under their own policies. Connecting WhatsApp or Instagram also binds Customer to those providers’ terms.

10. Security

We apply reasonable technical and organizational measures, including encryption of channel credentials, access restriction, and webhook verification. No system is entirely free of risk. Customer remains responsible for passwords and team access.

11. Changes

Changes to this Privacy Policy will be published on this page with an updated effective date. For material changes, we will try to notify you via the site or email.