Privacy Policy

Last updated: 19/02/2026

1. Introduction

IndedLabs Chat ("we", "our") is a SaaS platform that provides artificial intelligence chatbots for e-commerce. This privacy policy describes how we collect, use and protect personal information when you use our services, including the WhatsApp Business API integration.

2. Data we collect

We collect the following types of information:

  • Account information: name, email address and password when you register.
  • Conversation data: messages exchanged between end users and chatbots configured on the platform.
  • WhatsApp data: phone numbers, messages and conversation metadata processed through the WhatsApp Business API.
  • Technical data: IP address, browser type and device information to improve the service.

3. How we use data

  • Provide and maintain the chatbot service.
  • Process and respond to messages via WhatsApp and the web widget.
  • Improve the quality of AI assistant responses.
  • Send service-related communications.

4. WhatsApp and Meta integration

Our service uses the WhatsApp Business API provided by Meta Platforms, Inc. Messages sent and received through WhatsApp are processed by Meta in accordance with their own privacy policy. We act as a technical solutions provider (Tech Provider) and process WhatsApp data exclusively to provide the chatbot service to our clients. We do not sell or share WhatsApp data with third parties for advertising purposes.

5. Data sharing

We do not sell personal information. We may share data only with: essential service providers (hosting, AI), Meta/WhatsApp for API operation, and when required by law.

6. Data retention

Conversation data is retained according to each chatbot's configuration. Account data is retained while the account is active. You can request deletion of your data at any time.

7. Your rights

In accordance with GDPR and applicable legislation, you have the right to:

  • Access your personal data.
  • Rectify inaccurate data.
  • Request deletion of your data.
  • Object to the processing of your data.

8. Security

We implement technical and organisational security measures to protect your data, including encryption of sensitive data, restricted access and continuous monitoring.

9. Cookies and analytics

Inside the panel we only use strictly necessary cookies (session and security), which are exempt from consent: without them you could not log in. There is no analytics inside the panel. On our public pages we use, only if you allow it, Google Analytics 4 to understand how the site is used and improve it: it sets the cookies _ga and _ga_<id>, which expire after 24 months. Until you accept, nothing is downloaded from Google and no analytics cookie is created. We do not use advertising cookies and we do not build profiles.

Your choice is stored in the technical cookies il_consent and il_cid, set on the .indedlabs.com domain, so it also applies on indedlabs.com and you are not asked twice. To be able to evidence it, as required by Article 7(1) GDPR, we record the date, the purposes accepted, the version of the notice shown, the language and that random identifier; we do not store your IP address. Your choice expires after 24 months, and also whenever we change the purposes. You can change it at any time from the cookie icon in the bottom-left corner.

These cookies only appear on the public pages and on sign-in. There is no analytics of any kind inside the panel.

Cookie Owner Purpose Duration
indedlabs-chat-session First party Necessary. Keeps you signed in. Without it you could not use the panel. 2 hours
XSRF-TOKEN First party Necessary. Security: prevents another site from sending requests on your behalf. 2 hours
il_consent First party Necessary. Stores your cookie choice so you are not asked again. Set on .indedlabs.com, so your choice also applies on indedlabs.com. 24 months
il_cid First party Necessary. Random identifier used to evidence your consent if we are ever asked to. It measures nothing and does not identify you. 24 months
_GRECAPTCHA Google Ireland Limited Necessary. Tells humans from bots on sign-up and sign-in, to prevent spam and automated attacks. 6 months
_ga Google Ireland Limited Analytics (optional). Distinguishes one visitor from another. Only set if you accept it. 24 months
_ga_QF92XET315 Google Ireland Limited Analytics (optional). Keeps the measurement session state. Only set if you accept it. 24 months

10. Contact

For any privacy enquiries, you can contact us through the contact form on our website.