PappaChat

Data, privacy and security

This page says what we do with data in words you can check. The contractual wording lives in the privacy policy, the terms and the DPA; the substance is here.

Where it lives

The data stays in Europe. The company is Italian, based in Trieste.

What we collect

The messages your customers send you through the channels you connected, the replies that go out, and the content you upload. They exist to do the exact thing you hired us for: answering.

What we deliberately do not collect

  • Your conversations from before you connected. We do not import them.
  • Your contacts. We do not read them.
  • Profiled website traffic. The public pages set no profiling cookies.

Those three are not technical limitations. They are data belonging to your customers that we do not need in order to work for you, so we do not take it.

Who can see it

The people on your team, according to the permissions you granted. On our side, access to a customer's data happens only when it is needed to support you, and it is traced: every administrative access leaves a record that cannot be erased from the inside.

We do not use your customers' content to train models, ours or anyone else's.

The assistant and honesty

If a customer asks whether they are talking to a person, the assistant answers honestly. We do not treat that as a compliance detail: a support experience that pretends to be human loses more than it gains the first time somebody notices.

Exporting

Conversations export from the panel. They are your business's data and there is no step where you have to ask our permission to take them with you.

Deleting

You can delete content you uploaded at any time. To delete a specific customer or the whole account, the request goes through contacts and is carried out, not filed.

Security

What we can say without turning this page into a map for people who should not have one: connections are encrypted, your channel credentials are encrypted at rest, access is separated per business at the data level and not only in the interface, and administrative sign-ins are recorded.

If you find a security problem, write to us from contacts: we answer, we do not threaten.

If you ever stop

The channels stay yours and keep working without us. What switches off is the automation, not your number, not your page, not your inbox.