Security & Privacy FAQ

ChatBits implements multiple security layers:

• Encryption in Transit: TLS/SSL protocols for all data
• Encryption at Rest: Sensitive data encrypted in storage
• Secure Infrastructure: Hosted in secure data centers
• Access Controls: Only authorized personnel can access data
• Regular Audits: Security practices reviewed regularly
• Intrusion Detection: Systems monitor unauthorized access attempts

Yes. Your password:

• Is never stored in plain text
• Is hashed using industry-standard algorithms (bcrypt)
• Cannot be recovered, even by ChatBits staff
• Is used only for authentication

Recommendation: Use a unique, strong password (12+ characters with upper/lower/numbers/symbols).

No, except in limited cases:

• With your explicit permission (support request)
• Required by law (court order)
• Security incident investigation

Restrictions: No employee can see your password. All access is logged and audited. Unauthorized access results in immediate termination.

Your Meta data is protected separately:

• ✓ We access only data you explicitly authorized
• ✓ Data stored securely (encrypted)
• ✓ Data deleted upon account cancellation
• ✓ Not shared with Facebook
• ✓ You control what permissions ChatBits has

If you discover a vulnerability:

1. Email [email protected] with "SECURITY: [Description]"
2. Include steps to reproduce
3. Do NOT publicly disclose
4. We investigate and respond within 30 days
5. Thank you for helping keep ChatBits secure!

Required:

• Name (account identification)
• Email (account recovery and notifications)

Automatically Collected:

• IP address (security and abuse prevention)
• Device information (compatibility)
• Usage data (which features you use)
• Log data (errors, access times)

We do NOT collect: Browsing history outside ChatBits, location data, health/financial information, biometric data.

Absolutely NOT. ChatBits:

• ✗ Never sells personal data
• ✗ Never shares with marketers
• ✗ Never rents email addresses
• ✗ Never trades data for services

We may share data only with your consent, when required by law, or to protect security.

What we do:

• ✓ Store messages (to deliver them)
• ✓ Automate responses (that you configure)
• ✓ Keep logs (for performance)

What we do NOT do:

• ✗ Read for marketing purposes
• ✗ Use for ad targeting
• ✗ Share with third parties
• ✗ Analyze for unauthorized purposes

Yes, full GDPR compliance:

• ✓ Privacy Policy compliant
• ✓ All GDPR rights respected
• ✓ DPA available upon request
• ✓ Privacy by Design implemented
• ✓ Data protection throughout lifecycle

If you're in the EU: Your GDPR rights are fully protected. You can exercise rights anytime. You can file complaints with your data protection authority.