Privacy Policy

Last updated: 9 May 2026

1. Who we are

Chellular ("Chellular", "we", "us") is a customer service inbox service operated by TheC (registered in the United Arab Emirates and Thailand). We help small businesses manage customer messages from LINE, Facebook Messenger, and Instagram in one place.

Contact: privacy@chellular.thec.ae

2. What we collect

When you sign up and use Chellular, we collect:

• Account data: name, email, password (hashed), business name, country, role.
• Workspace data: workspace name and configuration, team member emails and roles.
• Channel data: access tokens you provide to connect your LINE OA, Facebook Page, or Instagram account — encrypted at rest.
• Customer message data: messages your end-customers send via LINE / Messenger / Instagram, the replies you (or our AI) send, and any attached media.
• Usage data: pages viewed, features used, errors. We use this to improve the product.
• Billing data: collected via our payment processors (Omise for Thailand, Stripe for UAE). We do not store full credit card numbers ourselves.

3. How we use it

To operate the service, bill you for your subscription, provide customer support, improve the product (in aggregate), and comply with legal obligations.

AI processing: we send customer messages to Anthropic's Claude API to generate suggested replies. Anthropic does not train its models on this data and is contractually bound to delete it after processing.

4. Who we share it with

Sub-processors required to run the service (Anthropic, Omise, Stripe, Resend, Contabo, LINE, Meta), authorities if required by law, and successors if Chellular or TheC is sold or merged. We do not sell your data and do not share it with advertisers.

5. How long we keep it

• Account + workspace data: while active, plus 90 days after cancellation.
• Customer messages: while active, plus 30 days after cancellation.
• Billing records: 7 years (Thai law) or 5 years (UAE).
• Backups: rolling 30 days.

6. Where we store it

Servers in Singapore (Contabo). We may transfer data to other countries (e.g., the United States) when using sub-processors like Anthropic, under standard contractual clauses.

7. Your rights

You can access, correct, delete, object to processing, or withdraw consent at any time. Email privacy@chellular.thec.ae. We respond within 30 days.

8. Security

TLS encryption for traffic, encryption at rest for sensitive fields, role-based access control, regular security reviews. No system is 100% secure. We notify affected users within 72 hours of discovering a breach.

9. Cookies

Essential cookies for login sessions, plus minimal analytics (no cross-site tracking, no advertising).

10. Children

Chellular is for businesses. We do not knowingly collect data from anyone under 16.

11. Changes

If we make material changes, we'll email account owners at least 14 days before they take effect.

12. Contact

privacy@chellular.thec.ae | TheC, Dubai, UAE