Privacy Policy

Last updated: October 19, 2026

1. Introduction

Chativ ("we", "our", or "Platform") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information.

Data Controller:
FOP Herasymiuk Nataliia Borysivna
78/2 Myru Ave., apt. 1a, Khmelnytskyi 29015, Ukraine
Tax Number (RNOKPP): 2871021324

2. Data We Collect

We may collect the following types of data:

  • Account data: email, name, password (stored only as a hash)
  • Profile data: company name, avatar
  • Connected channel data: access tokens for Instagram, Facebook, WhatsApp
  • Message data: conversation history with your customers
  • Technical data: IP address, browser type, cookies

3. How We Use Your Data

Your data is used for:

  • Providing platform services
  • Processing messages through connected channels
  • Generating AI replies based on your settings and knowledge base
  • Technical support
  • Security, error monitoring and service improvement

4. Data Storage

Your data is stored in a managed PostgreSQL database hosted by Railway in the EU (Netherlands). Data is encrypted in transit (TLS); passwords are stored as hashes, and API keys and channel access tokens are additionally encrypted in the database.

5. Data Sharing with Third Parties

We may share data with:

  • Meta (Facebook, Instagram, WhatsApp): to receive and send messages in the channels you connect
  • Telegram: notifications to your team about new conversations and leads
  • OpenAI and Anthropic: message text and your knowledge base are sent to generate AI replies; under their API terms this data is not used to train their models
  • Railway (hosting, EU) and Cloudflare (network, DNS and protection)
  • Resend: sending service emails (sign-up confirmation, password reset, invitations)
  • Google and GitHub: only if you choose to sign in with them
  • Payment provider: when paid plans are launched, payments are processed by the payment provider; we do not store card details
  • Google (Google Analytics 4): statistics of visits to chativ.app, only with your consent in the cookie banner

We do not sell your personal data to third parties.

Some of these providers are located outside the European Economic Area (USA). Such transfers rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses. The full list is on the Subprocessors page. Subprocessors

6. Your Rights (GDPR)

You have the right to:

  • Access a copy of your data
  • Rectify inaccurate data
  • Erase your data
  • Restrict data processing
  • Data portability to another service
  • Object to processing

7. Data Deletion

To delete your account or your data, write to [email protected] from the email address of your account. We will confirm the request and delete the data within 30 days, except data we are required to keep by law.

For Facebook-connected channels, you can also request data deletion through Facebook settings. We will process such requests within the timeframes required by GDPR.

8. Cookies

Without your consent, we use only cookies that are strictly necessary for the platform to work: keeping you signed in, remembering your language and your workspace. With your consent, chativ.app also uses Google Analytics cookies to measure visits. We do not use advertising cookies. Details are in the Cookie Policy. Cookie Policy

9. Contact

For privacy inquiries, please contact:
Email: [email protected]

Company Address:
FOP Herasymiuk Nataliia Borysivna
78/2 Myru Ave., apt. 1a, Khmelnytskyi 29015, Ukraine