TropiChatBack to Home

Privacy Policy

Last updated: February 18, 2026

TropiTech Solutions LLC ("TropiTech," "we," "us," or "our") operates TropiChat (tropichat.com), a unified messaging platform that helps businesses manage customer conversations across WhatsApp, Facebook Messenger, and Instagram Direct. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using TropiChat, you agree to this Privacy Policy and our Terms of Service. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you create a TropiChat account, we collect information you provide directly, including:

  • Full name and business name
  • Email address
  • Phone number
  • Business address and timezone
  • Profile photo or avatar
  • Authentication credentials (passwords are hashed and never stored in plain text)

1.2 Messaging and Conversation Data

To provide our unified inbox service, we collect and process the following data from your connected messaging platforms:

  • Messages sent and received across WhatsApp, Facebook Messenger, and Instagram Direct
  • Contact information for your customers (names, phone numbers, profile images)
  • Conversation metadata (timestamps, message status, channel)
  • Media attachments shared in conversations (images, documents, audio)
  • Labels, tags, and notes you assign to contacts or conversations

1.3 Usage and Analytics Data

We automatically collect certain information when you interact with the Service:

  • Browser type and version
  • Pages visited and features used within TropiChat
  • Date and time of access
  • IP address and approximate location
  • Device type and operating system

1.4 Third-Party Platform Data

When you connect WhatsApp, Facebook, or Instagram to TropiChat, we receive data through Meta's official APIs, including:

  • Your Facebook/Instagram Page information
  • WhatsApp Business Account details
  • Access tokens required to send and receive messages on your behalf

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Provide the Service: Deliver, operate, and maintain the TropiChat messaging platform, including routing messages across WhatsApp, Facebook Messenger, and Instagram Direct
  • Account Management: Create and manage your account, authenticate your identity, and provide customer support
  • Service Improvement: Analyze usage patterns to improve features, fix bugs, and enhance the user experience
  • Communications: Send you transactional emails (account verification, password resets) and, with your consent, product updates or marketing communications
  • Security: Detect and prevent fraud, abuse, or unauthorized access to the Service
  • Legal Compliance: Comply with applicable laws, regulations, and legal processes

3. How We Store and Protect Your Data

We take the security of your data seriously and implement appropriate technical and organizational measures:

  • Infrastructure: Your data is stored on Supabase, a secure, SOC 2 Type II compliant cloud platform with data centers in the United States
  • Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher
  • Encryption at Rest: Database contents are encrypted at rest using AES-256 encryption
  • Access Controls: We use role-based access controls and authentication tokens to limit access to your data to authorized personnel only
  • Regular Audits: We periodically review our security practices and update them as necessary

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

4. Third-Party Integrations and Disclosures

4.1 Meta Platforms (WhatsApp, Facebook, Instagram)

TropiChat integrates with Meta's platforms through their official Business APIs to enable multi-channel messaging for your business:

  • We connect to your WhatsApp Business Account, Facebook Page, and Instagram Business Account using Meta's official Graph API and WhatsApp Business API
  • Message content is transmitted through Meta's servers before reaching TropiChat, in accordance with Meta's Privacy Policy
  • WhatsApp messages remain end-to-end encrypted between your customers and your WhatsApp Business number; once delivered to TropiChat through the official Business API, we store messages securely in our encrypted database
  • We only access the data necessary to provide our messaging management service
  • We do not sell, rent, or share your messaging data with third parties, including Meta, beyond what is required to operate the API integration

For more information about how Meta handles data, please review:

4.2 Other Third-Party Services

We may share data with the following categories of providers:

  • Hosting and Infrastructure: Supabase (database and authentication), Vercel (application hosting)
  • Analytics: Anonymized usage data for service improvement
  • Payment Processing: If applicable, payment processors handle billing data; we do not store credit card numbers

We do not sell your personal information to third parties. We only share data with third-party services as necessary to provide and improve the Service.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

  • Account Data: Retained while your account is active and for up to 30 days after account deletion to allow for reactivation
  • Message Data: Retained while your account is active; deleted within 90 days of account closure
  • Usage Logs: Retained for up to 12 months for analytics and security purposes

You may request deletion of your data at any time. See our Data Deletion page for instructions, or contact us directly at support@tropichat.chat.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data, subject to legal obligations
  • Data Portability: Request your data in a structured, machine-readable format
  • Opt-Out: Unsubscribe from marketing communications at any time via the unsubscribe link in our emails
  • Withdraw Consent: Revoke consent for data processing where consent is the legal basis

To exercise any of these rights, contact us at lamar@tropitech.org. We will respond to your request within 30 days.

7. Cookies and Tracking Technologies

TropiChat uses cookies and similar technologies to:

  • Keep you signed in to your account
  • Remember your preferences and settings
  • Analyze usage patterns and improve the Service

You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain features.

8. Children's Privacy

TropiChat is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and service providers are located. By using TropiChat, you consent to the transfer of your data to these countries.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Continued use of TropiChat after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: