This Privacy Policy explains how ChatCript Technologies (Pvt) Ltd ("ChatCript", "we", "us", "our") collects, uses, shares and protects your information when you use the LakPage mobile app and website (together, the "Platform"). By using the Platform, you agree to this Privacy Policy.
1. Information We Collect
a. Information You Provide
- Account details linked through your Google or Apple sign-in: display name, email address and profile photo.
- Profile information you enter yourself: bio, country, province, city, hometown, workplace, school, interests, etc.
- Content you create: posts (text, photos, YouTube links), comments, reactions, hashtags and direct chat messages (text, images, documents, YouTube links).
- Page content you manage: page profile, contact details, opening hours, special holidays, uploaded documents and knowledge base articles for the AI chatbot.
b. Payment Information
- Chatbot token top-ups are currently handled by direct bank transfer. When you tap Purchase Tokens, the app shows our contact details; you reach us on email or WhatsApp and we share bank-account details separately.
- LakPage does not collect, store or have access to your card number or online banking credentials. The transfer is made directly from your bank to ours.
- We only record what's needed to credit your tokens: the transfer amount, currency, date, an invoice reference and any message you attach when contacting us. This is used to credit your page's chatbot balance and to handle refund requests.
c. Automatically Collected Data
- Device information (type, model, operating system, app version).
- Server log information (IP address, request time, endpoint accessed) used for security and abuse prevention.
- Usage signals such as which posts you view, follow and react to, used only to operate the feed and recommendations.
d. Optional Data
- Camera and gallery access when you upload a photo or profile picture.
- Push notification tokens (only if you allow notifications).
2. How We Use Your Information
- Provide core Platform functionality: authentication, posts, feed, pages and the AI chatbot.
- Deliver content you've opted into — posts from pages you follow and replies from the AI chatbot you're interacting with.
- Send transactional push notifications for comments and page activity.
- Operate the AI chatbot for pages using the documents and knowledge base entries provided by that page's admins.
- Process chatbot top-up payments and maintain transaction records for billing and refund purposes.
- Prevent fraud and abuse and keep the community safe.
- Comply with applicable laws.
We do not sell your personal information, and we do not serve personalised advertising.
3. How We Share Your Information
We share information only in these situations:
- With other users, based on your own actions (e.g. a post you make to a page is visible to that page's followers).
- With service providers who process data strictly on our behalf and under contract (see Data Processors below).
- If required by law, e.g. in response to valid legal process from a competent authority.
- In a business transfer, such as a merger or acquisition, where the successor agrees to this Privacy Policy.
4. Legal Basis for Processing (GDPR)
If you are in the European Economic Area, United Kingdom or Switzerland, we process your personal data on these legal bases:
- Contract: processing necessary to provide the Platform — account creation, posts and pages.
- Consent: optional features such as push notifications and camera/gallery access.
- Legitimate interest: fraud prevention, platform security, abuse detection and aggregated analytics.
- Legal obligation: compliance with applicable laws and lawful requests.
5. Your Rights
Depending on where you live, you may have the following rights. To exercise any of them, contact us at support@lakpage.com from the email linked to your account. We respond within 30 days.
- Access — request a copy of the personal data we hold about you.
- Rectification — correct inaccurate data via your profile settings or by contacting us.
- Erasure — delete your account and all associated data from Profile → Delete Account in the app, or by contacting us.
- Data portability — request an export of your data in a structured, machine-readable format.
- Restriction — ask us to limit how we process your data in certain circumstances.
- Objection — object to processing based on legitimate interest.
- Withdraw consent — where processing is based on consent, withdraw it at any time.
You also have the right to lodge a complaint with your local data protection authority.
6. Your Privacy Controls
- Edit or delete any of your profile information at any time.
- Unfollow a page to stop seeing its posts.
- Block another user to stop them from interacting with you on the platform.
- Report content or users that violate our Terms.
- Delete your account in Profile → Delete Account. All personal data is removed. Residual copies in backups are purged within 30 days.
7. Data Deletion
You can delete your LakPage account and all associated personal data at any time. This includes any WhatsApp Business credentials, Meta access tokens, pages, posts, chats and chatbot knowledge bases connected to your account.
How to request deletion:
- In-app (fastest): Sign in to LakPage → Profile → Delete Account. Your account and all associated data — including any WhatsApp Business Account credentials and Meta access tokens you have connected — are removed immediately.
- By email: If you cannot access the app, email support@lakpage.com from the email address linked to your LakPage account and request account deletion. We will confirm by email and complete the deletion within 30 days.
Residual copies in encrypted backups are purged within 30 days of deletion. Payment and tax records (transaction amount, date, invoice reference) are retained for up to 6 years to comply with accounting obligations, as described in Data Retention below. No other personal data is retained after deletion.
8. Data Retention
- Account data: retained while your account is active. Deleted on account deletion.
- Direct chats and messages: retained while the conversation exists. Deleted when you delete the chat or your account.
- Posts and comments: retained until you delete them or delete your account.
- Page data (profile, opening hours, documents, chatbot knowledge base): retained while the page exists. Deleted when the page is deleted.
- Payment records: transaction records (amount, date, order ID, payment status, masked card reference) are retained for up to 6 years to comply with tax and accounting obligations, even after account deletion.
- Server logs: retained for up to 30 days for security and abuse prevention, then discarded.
9. Data Processors and Third Parties
We use the following processors to operate the Platform. Each handles your data under a data processing agreement:
- Google Firebase (Google LLC) — authentication (Google & Apple sign-in), push notifications. Data may be processed in the US. Firebase Privacy.
- Amazon Web Services (AWS) — application hosting, managed PostgreSQL and media storage (photos, banners, documents) in AWS ap-south-1 (Mumbai, India). AWS Privacy.
- DeepSeek — used only to power the optional AI chatbot for pages. When a visitor asks the chatbot a question, that question together with the relevant page knowledge base is sent to DeepSeek to generate the answer. No user identifiers are sent. DeepSeek.
10. Data Security
We use encryption in transit (TLS 1.2+), encryption at rest, role-based access control and hardened server configurations. Passwords are never stored — authentication is delegated to Google and Apple. No system is 100% secure, and you share information at your own risk.
11. Children's Privacy
The Platform is not intended for children under 13 (or 16 in the EEA/UK). We do not knowingly collect data from minors. If we learn that a child has provided us with personal data, we will delete it promptly. Please contact us if you believe a child has given us personal data.
12. International Data Transfer
Your data is stored and processed primarily on servers in AWS ap-south-1 (India). Where data is transferred to other regions (e.g. US-hosted Firebase services), we rely on Standard Contractual Clauses or other approved transfer mechanisms to ensure appropriate protection.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date and notify you of significant changes through the app or by email.
14. Contact Us
If you have questions about this Privacy Policy, your data or wish to exercise your rights, contact us at:
Email: support@lakpage.com
Website: https://lakpage.com