Privacy Policy
What we collect, why we collect it, and what we will never do with it — including the messages your customers send you.
- Last updated
- 4 September 2026
- Effective from
- 4 September 2026
- Applies to
- chatboss.pk and the ChatBoss app
Jump to a section
1. The short version
- Your customers' conversations belong to you. We store them so ChatBoss can do its job, and for nothing else.
- We do not sell your data, and we do not share it with advertisers.
- We do not use your conversations to train models for other businesses.
- You can export or delete your data whenever you want.
- If you want any of this explained in Urdu, call us — ہم اردو میں سمجھا دیں گے۔
This summary is for reading convenience. The numbered sections below are the binding version.
2. Who we are
ChatBoss is operated by Northbound Technologies, from Pakistan. You can reach us any time at the address in the last section, and a person will reply.
In this policy, “we” means Northbound Technologies, “you” means the business using ChatBoss, and “your customers” means the people who message your business.
3. What we collect
Three kinds of information, for three different reasons.
Information you give us
Your name, business name, phone number, email address, business type and billing details — what you enter when you sign up or book a demo.
Information your business puts into ChatBoss
Your price list, timings, services, FAQs and the answers you approve — the material your agent replies from.
Information created by using the service
Conversations handled, appointments booked, leads captured, response times, and the technical logs needed to keep the service running.
4. Your customers' messages
This is the most important section, so it is separate. When your customers message your business, ChatBoss handles those messages on your behalf and on your instructions. The messages are yours, not ours. We hold them to deliver the service you asked for, and we do not use them for our own purposes.
Because those messages can carry personal details — a health complaint to a clinic, an address to a shop — you are responsible for telling your customers that an automated assistant handles their messages. In data protection terms, you are the controller and we are the processor; if a client's own lawyer asks for that in writing, ask us and we will provide it.
We do not use your customers' messages to train models for any other business.
5. Instagram, Messenger and WhatsApp
ChatBoss connects to your Facebook Page, Instagram account and WhatsApp number through Meta. You connect them yourself, you can disconnect them at any time, and Meta holds us to its own rules about what we may do with what it sends us. This section says what we receive and what we do with it, because you are entitled to know before you connect anything.
| What Meta sends us | What we do with it |
|---|---|
| The messages your customers send your Page, Instagram account or WhatsApp number | Pass them to your agent so it can reply, and keep them in your inbox so you have the history |
| The sender’s name, profile picture, and the ID Meta uses to identify them to us | Show you who you are talking to, and keep one conversation together instead of scattered across many |
| Which Page, account or number the message arrived on | Route it to the right business and the right agent |
| Basic details of the Page or account you connected | Set your agent up, and show you what is currently connected |
What we never do with it. These are commitments to you and to Meta, and they are not negotiable per client:
- We do not sell it, rent it, or pass it to a data broker;
- We do not use it to target advertising, on Meta’s platforms or anywhere else;
- We do not use it to decide whether anyone gets credit, insurance, a job or a tenancy;
- We do not combine it with data bought from elsewhere to build a profile of a person;
- We do not let one business’s conversations inform the answers we give for another business;
- We do not train AI models on it for anyone other than you.
Disconnecting ChatBoss in your Facebook or Instagram settings stops us receiving anything further, but it does not delete what we already hold. Ask us and we will delete it — the steps, and what survives a deletion, are on our Data Deletion page at /legal/data-deletion.
One obligation sits with you rather than us: your customers should know an automated assistant handles your messages. ChatBoss will always answer honestly if asked directly, but saying so up front — in your Page’s greeting, or your first reply — is your call to make and your responsibility.
6. Why we use it
We use the information above to:
- run the service — replying, qualifying, booking, and reporting back to you;
- set up your agent and support you when something goes wrong;
- bill you, and quote you correctly for your volume;
- keep the service secure and prevent abuse;
- meet our legal and tax obligations.
8. Where it is stored
Being straight with you: the cloud and AI services ChatBoss runs on host their servers outside Pakistan, in the Asia Pacific region, so your data is processed abroad. We use business accounts with each of them, under terms that require them to keep your content confidential.
9. How long we keep it
We keep conversations and lead records for as long as your account is active, so your history stays useful to you.
If you close your account we delete your data within 90 days, except where we have to keep billing records longer for tax. You can ask us to delete specific conversations sooner.
10. Your rights
You can ask us for a copy of your data, to correct it, to delete it, or to stop processing it. Email us and we will do it within 30 days.
Pakistan does not yet have a general data protection law in force, so no regulator is making us offer this. We are promising it anyway, and you can hold us to it as part of our agreement.
If one of your customers asks you to delete their information, you can do that yourself in ChatBoss, or ask us and we will action it.
11. Security
Your data is encrypted in transit and at rest, access is limited to the people who need it to support you, and we keep logs of who looked at what.
No system is perfect. If there is a breach affecting your data, we will tell you within 72 hours and explain what happened and what we are doing about it.
12. Changes to this policy
If we make a material change we will tell you by email and in the app at least 30 days before it takes effect.
13. Contact us
Questions about this policy, or about your data, go to a person — not a form.
- Operated by
- Northbound Technologies