Who this policy covers
Triachat combines a website chat widget, a dashboard, Telegram bots for teams, Telegram Business, connected messengers and email, Smart AI and APIs. This policy describes data about visitors, service customers and team members. Processing depends on the channels and features enabled.
The service operator is TriaChat Inc., Delaware, USA. Contact us at connect@triachat.com. For accounts, billing and its own support, TriaChat Inc. determines the purposes of processing. For visitors’ conversations, the website or channel owner has that role; Triachat processes data on their instructions. This policy supplements that owner’s notice.
Data the service receives
- Account and team: Telegram ID, name and username, workspace, roles, settings and sign-in history.
- Conversations: messages, replies, attachments, voice recordings, reactions, delivery information and contact details you provide.
- Technical data: IP address, language, time zone, page address and chat-continuity identifier. Browser information is also processed when you sign in to the dashboard. Website operators can see a visitor’s IP address.
- Connected services: user identifiers and available profiles, order and product information, knowledge bases, AI instructions and connection settings, within the permissions granted.
- Billing: plans, orders, amounts, payment status and identifiers, and details needed for reconciliation and refunds. For payment reviews, this includes information about the payer, payment method and source of funds provided on request, and review statuses and results received from the payment provider.
Purposes and legal grounds
We use data for sign-in, message delivery, team and AI replies, translation, integrations, usage accounting and billing, support and protection against abuse. Payment reviews aim to prevent fraud, money laundering and breaches of applicable restrictions.
Depending on the purpose and applicable law, processing relies on performance of a contract, legal obligations, legitimate interests in operating and securing the service, or consent. Consent for optional features is requested separately where required. Website and channel owners are responsible for the lawfulness of processing their customers’ conversations and for the necessary notices.
Telegram, Business, messengers and email
Messages are forwarded to channels, groups and topics connected by the owner. The owner manages team membership and permissions. Telegram Business processes chats and events available to the bot under the permissions granted.
Email connections receive and send messages and attachments. Permissions may cover a mailbox; their scope is displayed during authorisation. You can revoke access with the provider or disconnect the integration.
Telegram, WhatsApp, Viber and email services operate under their own rules. Disconnecting a channel does not delete messages already delivered to participants’ accounts.
AI, translation and memory
We use OpenAI to power our AI agent. When AI features are enabled, messages and the necessary conversation context, instructions, knowledge-base excerpts and authorised integration data are sent to OpenAI. Features that work with images, documents or voice also transmit the relevant materials for processing.
Translation may use a separate provider configured for that feature. External providers process data under their terms and the terms of our connection.
When learning is enabled, the service may save conclusions and corrections in the customer’s knowledge base. “Remember clients” keeps a brief card of past interactions for up to 90 days after the last conversation. You can disable it and request forgetting. These features do not mean training OpenAI’s underlying model.
AI can make mistakes. Check important decisions about orders, payments and access with a person; you can ask an operator to join the conversation.
Who receives data
Data is available to the website or channel owner and their authorised team. To operate the service, we use OpenAI and providers of hosting, technical infrastructure, translation, payment and email services; data also passes to messengers and systems connected by the customer. Each recipient receives information needed for the relevant function. Payment reviews may involve sharing necessary information with the payment provider. Where the provider requests documents directly, its policy also describes their processing.
We do not sell personal data or share conversations for advertising. Disclosure may be required by law or to protect rights in circumstances allowed by law. Data may be processed outside your country; legally required protections apply to such transfers.
Retention periods
Data is kept for as long as needed to operate the relevant feature, fulfil obligations and handle requests. Conversations are processed temporarily; Triachat is not a permanent conversation archive.
- Chat and AI: under standard settings, a web session lasts up to 24 hours after its latest activity renewal; current AI conversation memory lasts 1–24 hours after the last update and is cleared on closure. Temporary processing periods depend on the channel and settings. Telegram Business content lasts 1 day by default.
- In your browser: widget history lasts up to 7 days or until you clear it.
- Email: temporary message content lasts up to 72 hours; drafts up to 7 days, with cleanup after 24 hours of inactivity.
- Memory and knowledge: a “Remember clients” card lasts up to 90 days after the last conversation. Knowledge is kept separately; deleting an entry stops its use, while correction history remains until the AI profile or site is deleted.
- Accounts, billing, payment-review materials and technical records: while needed for service, security, accounting, resolving disputes and compliance with legal requirements.
Conversation data is not stored in Triachat backups. Messages in Telegram, other messengers and participants’ mailboxes are retained under the rules of those platforms and account owners.
Cookies and browser storage
The dashboard uses a session cookie and request-protection mechanisms for sign-in. Your browser also stores your language, theme and other interface preferences. The widget uses local storage for chat continuity, history, sound and language settings.
You can delete or restrict browser storage; this may sign you out, remove local history or interrupt chat continuity. The widget history period does not apply to every browser preference. Website owners are responsible for consent to optional storage and third-party analytics where required.
Your rights and deletion
Depending on applicable law, you may request access, a copy, correction, deletion or portability, restrict or object to processing, withdraw consent and complain to a competent data-protection authority. Withdrawing consent does not invalidate prior lawful processing.
Email connect@triachat.com. For conversations through another business’s website or channel, you can also contact its owner; we help them fulfil requests. To protect data, we may need to verify your connection to an account or conversation.
- “Clear chat and exit” removes local history and ends the conversation.
- “Remember me” and forgetting requests control AI memory.
- Account deactivation ends access; requests to erase account data are handled separately, subject to required retention.
These actions do not automatically erase messages from other participants’ Telegram accounts or mailboxes. Normal Business-session expiry also does not retract delivered copies. Requests are handled within applicable legal deadlines.
Security and customer responsibilities
We use protected connections, access checks and workspace separation; connection secrets are protected with encryption. Access is limited to what is needed for the task.
Customers should protect their Telegram accounts and keys, grant necessary permissions and promptly remove former team members’ access. Notify us of a suspected leak or unauthorised access.
Age of users
The Triachat dashboard is intended for people legally able to enter a contract independently or act for an organisation. Website and channel owners must consider their audience’s age and obtain a legal representative’s permission where required. If a child’s data has been provided unlawfully, notify the relevant channel owner and the service operator.
Operator, requests and changes
The operator is TriaChat Inc., Delaware, USA. For data questions and requests under this policy, email connect@triachat.com. You do not need an account to contact us.
We update this policy as the service changes and show its revision date. Material changes are communicated through available service channels; new consent is requested separately where legally required. Use of the service is described in the Terms of Service.