Privacy policy

Last updated 5 October 2026

GreatDev OÜ ("we") runs Chat'N'Sell. This policy explains what personal data we handle, why, and your rights. We handle data in two roles.

Merchants

What we collect

• Account details: name, email, password (stored hashed), team members, sign-in and security events.
• Company and billing details: legal name, address, VAT number, plan, invoices, and the brand and last four digits of a payment card.
• Connection details for your store and Telegram bot, such as access tokens, which we store encrypted.
• Support messages you send us.

Why

To provide the service under our contract with you, to bill you, to keep the service secure, to meet legal and accounting duties, and to tell you about changes to the service. We send marketing only if you agree, and you can opt out at any time.

Shoppers (on behalf of stores)

When someone uses a store's bot or Mini App, we process for that store: their Telegram ID, name, username and language; their cart, wishlist, alerts, reviews and orders; the contact and delivery details they enter at checkout; their referral activity; and messages they send to the AI assistant. We use it only to run the store's features and never sell it or use it for our own marketing. Shoppers can turn off promotional messages in the bot at any time.

Website visitors

With your consent only, this website and the merchant panel use Google Analytics 4 (analytics) and Google Ads and the Meta Pixel (advertising) to measure how they are used and which of our ads work. When you have allowed advertising, our server also reports sign-ups, store setup and subscriptions to Meta (Conversions API) and Google (GA4 Measurement Protocol), with your email address hashed. The legal basis is your consent, which you can withdraw at any time under Cookie settings; details and retention are in our cookie policy. Google and Meta may process this data outside the EEA under the EU Standard Contractual Clauses. Forms collect only what you type, to reply to you. Our servers keep short-lived technical logs (IP address, browser, pages requested) for security.

Who we share data with

• Hosting and infrastructure: [hosting provider and region], and Cloudflare for DNS.
• Telegram, to deliver bot messages and run Mini Apps.
• The commerce platform you connect (Shopify, WooCommerce, Magento, BigCommerce), to sync products and create orders.
• Anthropic, to generate AI assistant replies, only for stores that switch the assistant on.
• Payment and email providers for our own billing and email, when used.
• Authorities, where the law requires it.

Some of these providers are outside the European Economic Area. Where they are, we rely on adequacy decisions or the EU Standard Contractual Clauses.

How long we keep it

Account data for as long as your account exists and then up to 90 days, invoices for as long as accounting law requires (7 years in Estonia), and shopper data until the store deletes it or disconnects, then within 90 days.

Your rights

You can ask to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent. Email hello@greatdev.net. Shoppers should contact the store first; we help stores answer. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local authority.

Security

We encrypt data in transit, encrypt stored credentials, support two-factor sign-in, and limit access to the people who need it.

Changes

We will post updates here and tell merchants about material changes by email or in the panel.

Contact

GreatDev OÜ, [registered address], registry code [registry code]. Email hello@greatdev.net.