Privacy Policy

Last updated: 11 November 2026

Intercontinental Technologies Sdn Bhd ("we", "us", "our") runs Hyperchat at https://ai.hyperchat.bot (the "Service"). Hyperchat is a customer messaging platform: businesses use it to answer their customers on WhatsApp, Facebook Messenger and their own website chat, with their team and with chatbots.

This policy explains what information we collect, how we use it, who we share it with, how long we keep it, and how to have it deleted.

1. Two kinds of information

Business accounts. When a business signs up, we are responsible for the account information of the business and its team members.

Conversations a business has with its customers. When a business connects WhatsApp, a Facebook Page or its website chat, Hyperchat receives and stores the messages and contact details of the people who write to that business. The business decides what is collected and how it is used (it is the "data controller"). We process it on the business's behalf, only to provide the Service to that business (we are the "data processor"). If you messaged a business, you can also contact that business about your data.

2. Information we collect

2.1 Business owners and team members

Name, email address and phone number
Password (stored only as a secure hash) and two-step sign-in settings
Business details you add to your business profile, such as business name, logo and address
Plan, usage and billing records. Card payments are handled by our payment providers; we do not store card numbers.
If you sign in with Google or Facebook: the name, email address and profile picture that provider shares

2.2 Connected channels

WhatsApp: the WhatsApp Business Account ID, phone number IDs, display phone number and an access token (stored encrypted).
Facebook Pages (Messenger): when you connect a Page with Facebook Login for Business, we receive the list of Pages you manage. For the Pages you choose to connect, we keep the Page ID, name, username, category, follower count, profile picture and a Page access token (stored encrypted). We do not read Page insights and we do not publish posts.

2.3 People who message a business through Hyperchat

For each business, visible only to that business's team:

WhatsApp: phone number or WhatsApp user ID, WhatsApp profile name or username, messages, photos, files, voice messages, reactions, and delivery and read status.
Messenger: the ID Facebook gives the person for that Page, their first and last name and profile picture (we keep a copy of the picture), messages, photos, files, reactions, button taps, delivery and read status, and the m.me link code or ad that opened the chat.
Comments on a business's Facebook Page, only when the business turns on comment replies: the comment text, the commenter's name, and the comment and post IDs, so the business can send one private reply and never reply twice.
Website chat: the name, email address or phone number the visitor types into the chat form, their messages and files, the page they are on, how they arrived (for example from a search engine), their device type and time zone.
Anything the business's team adds, such as notes, labels, groups, custom fields, sales pipeline stages and the team member assigned to the chat.

2.4 Technical information

Server logs with IP addresses and browser details, used for security and to fix problems.
Cookies that keep you signed in and protect forms, and settings saved in your browser such as dark mode. A website chat visitor's browser keeps a chat key so the chat continues on the next page. We do not use advertising cookies.

3. How we use information

To provide the Service: show conversations in the business's inbox, send the business's replies, run the chatbots and automatic replies the business sets up, and keep its contact records.
To answer comments on a business's own Facebook Page with one private message and, if the business chooses, one reply under the comment, exactly as the business set it up.
To show the business reports about its own conversations.
To send account and service emails, and the notifications a business turns on.
To process plan payments.
To keep the Service secure, prevent abuse and fix problems.
To meet legal obligations.

We do not sell personal information, use it for advertising, or use one business's customer data for another business. Information we receive from Meta (Facebook, Messenger and WhatsApp) is used only to provide these features to the business that connected the account, as Meta's Platform Terms allow.

4. Who we share information with

We share information only with providers that help us run the Service, and only what they need:

Meta Platforms (WhatsApp Business Platform, Messenger Platform and Facebook Login), to deliver messages and connect accounts.
AI providers such as OpenAI, only when a business turns on AI features (for example AI replies, summaries or translation). The text the feature needs is sent to the provider.
Payment providers (Stripe or Razorpay), for plan payments.
Email delivery providers, for account and notification emails.
Hosting and infrastructure providers that run our servers, and Pusher, which delivers live updates to the inbox.
Services a business connects itself, such as its own webhooks, online store or other integrations. Information goes there on the business's instruction.
Authorities, when the law requires it.

5. Where information is stored

Our servers are located in Malaysia. Meta, AI providers and our other providers may process information in other countries under their own safeguards.

6. How long we keep information

Business accounts and their conversations: while the account is active.
When a business deletes its account, or asks us to delete its data, we delete it within 30 days, and from backups within 90 days.
When a business disconnects a WhatsApp number or Facebook Page, we stop receiving its messages. Existing conversations stay in the business's inbox until the business deletes them or its account.
Chatbot run history is kept for 30 days. Website chats a business opens to test its widget are removed after one day.
Server logs are kept for up to 90 days.

7. Deleting your information

Businesses: email support@hyperchat.bot from the owner's email address to delete your business and all its data. To stop receiving Facebook data straight away, disconnect the Page in Settings > Messenger, or remove Hyperchat on Facebook under Settings & privacy > Settings > Business integrations.

People who messaged a business: ask that business, or email support@hyperchat.bot with the business or Facebook Page you messaged and the name or phone number you used. We delete your conversations and contact details from that business's Hyperchat account within 30 days and let you and the business know.

Step-by-step instructions: https://ai.hyperchat.bot/data-deletion

8. Your rights

Under Malaysia's Personal Data Protection Act 2010, and the GDPR if you are in the European Economic Area, you can ask to access, correct or delete your personal data, or object to how it is used. Email us and we will answer within 30 days. For conversations with a business, we may pass your request to that business, because it decides how your data is used.

9. Security

Connections to Hyperchat use HTTPS. Access tokens are encrypted when stored, passwords are hashed, each business sees only its own data, and team members' access follows the roles the business gives them. Two-step sign-in is available. No method is completely secure, but we work to protect your information and will tell affected businesses about a data breach as the law requires.

10. Children

Hyperchat is a service for businesses and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

11. Changes to this policy

We may update this policy. We will post the new version on this page and change the "Last updated" date. For important changes, we will also tell business owners by email.

12. Contact us

Intercontinental Technologies Sdn Bhd Email: support@hyperchat.bot