Privacy Policy

We may collect personal data in the following situations:

• When you create, manage, or access an account
• When you communicate with us via chat, email, or support channels
• When you complete forms, surveys, or participate in events or beta programs
• When you interact with our website or applications
• When you connect a third-party platform or service (such as Google, Meta, LINE, or Microsoft) to 108Chat
• When you voluntarily provide information in connection with our services

These examples are illustrative and not exhaustive.

3.1 Categories of Personal Data

Where required by law, analytics and marketing cookies are used only after you have provided explicit consent through our cookie banner.

We process personal data for legitimate business purposes, including to:

• Operate, maintain, and provide the Platform
• Display, organize, send, and manage your messages across connected channels
• Improve, customize, and enhance the user experience
• Provide customer support and respond to inquiries
• Communicate service updates and administrative messages
• Monitor usage trends and platform performance
• Maintain security, prevent fraud, and ensure system integrity
• Comply with legal and regulatory obligations

We may share personal data only in limited circumstances, including:

• With trusted service providers who assist in operating the Platform (such as cloud hosting and infrastructure providers)
• With integration partners as authorized by you, solely to provide the features you request
• For legal, regulatory, or security reasons when required by law
• With your explicit consent

All third parties are contractually required to process data securely and only for specified purposes. 108Chat does not sell personal data.

108Chat lets you connect external messaging and email accounts so you can manage all of your conversations in one inbox. When you connect an account, you authorize 108Chat to access and process the data necessary to provide that feature. Supported integrations include Google (Gmail), Microsoft (Outlook), Meta (Facebook and Instagram), WhatsApp, and LINE.

6.1 Google API Services and Gmail Data

When you connect a Gmail account, 108Chat requests only the access required to bring your email into the unified inbox. We may request the following Google OAuth scopes:

You can disconnect a Google account at any time from your 108Chat settings, and you may review or revoke 108Chat's access through your Google Account at myaccount.google.com/permissions.

6.2 Other Integrations

For Microsoft Outlook, Meta (Facebook and Instagram), WhatsApp, and LINE, we access only the data needed to deliver, display, and send your messages and to operate the features you enable. Each provider's own privacy policy governs how it handles your data on its platform.

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, or resolve disputes.

When data is no longer required, it is securely deleted or anonymized. When you disconnect an integration or delete your account, the associated access tokens and data are removed in accordance with our retention schedule.

You may request access to, or deletion of, your personal data — including data obtained through connected integrations such as Gmail — at any time by emailing privacy@108.chat. We will action verified requests in accordance with applicable law.

We implement appropriate technical and organizational safeguards to protect personal data, including encryption of data both in transit and at rest, strict access controls, continuous monitoring, and regular security reviews. Access to sensitive data, such as Google user data, is limited to authorized personnel and used only as described in Section 6.

While we take reasonable measures to protect data, no system can guarantee absolute security.

Bot Protection (Cloudflare Turnstile)

To protect our sign-up, sign-in, contact, and other forms from automated abuse and bot traffic, we use Cloudflare Turnstile. Turnstile processes a limited set of client-side signals — such as your IP address, TLS fingerprint, User-Agent header, and the site key and its associated origin — solely to distinguish human visitors from bots. These signals are strictly necessary for security and are not used to identify, profile, or track you. Cloudflare's processing of this data is governed by the Cloudflare Turnstile Privacy Addendum and the Cloudflare Privacy Policy.

Depending on your jurisdiction, you may have the right to:

Your personal data may be transferred to and processed in countries other than your country of residence. Where this occurs, we implement appropriate safeguards to ensure adequate data protection.

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or how we handle personal data, including Google user data.

When we make material changes, we will update the "Last updated" date at the top of this page and, where required by law or where the change materially affects how we use your data, notify you through the Platform or by email before the change takes effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after an update takes effect constitutes acceptance of the revised policy.