Privacy Policy

qpChat is a private, invitation-only messaging console for businesses. Business administrators connect their own messaging channels (WhatsApp Business, Facebook Pages / Messenger, Instagram professional accounts, Telegram bots, Viber bots) and their managers reply to incoming customer conversations from a single unified inbox. Access is restricted to credentials issued by an administrator.

Who we are

The data controller is Quality Performance Core Ltd. For any privacy request, contact support@qpcore.com.

Information we process

• Account data — login identifier and password (hashed), role (owner / admin / manager) and the display labels an admin assigns to channels.
• Messages & media — the content of conversations between a connected business and its customers (text, photos, video, voice notes, files), stored so managers can read and reply.
• Contacts — the customer profile data the messaging platforms provide (e.g. name/username and the platform identifier of the person who messaged the business first).
• Channel access tokens — the access tokens an administrator grants when connecting their own WhatsApp / Facebook Page / Instagram / Telegram / Viber asset. Tokens are stored per administrator and are never shared across accounts.
• Device push tokens — the Apple Push Notification token of a signed-in device, used to deliver new-message notifications. Removed on sign-out.

How we use it

• To deliver the core service: receive inbound customer messages via webhooks and send the business's replies on its behalf through the connected platform's API.
• To route conversations to the correct administrator and assigned manager.
• To send push notifications about new messages and account events.
• We do not sell personal data and do not use message content for advertising.

Third-party platforms

When a business connects a channel, message delivery is handled by that platform under its own terms and privacy policy: Meta Platforms (WhatsApp Business Platform, Messenger Platform, Instagram Messaging), Telegram, Viber, and Apple (push notifications). We exchange only the data required to send and receive messages on behalf of the connected business account.

Data retention & deletion

Conversations and contacts are retained while the account is active so the business has its message history. Administrators can delete individual messages or entire conversations from within the app at any time. To delete an entire account and all of its associated data, see our Data Deletion page or email support@qpcore.com.

Security

Passwords are stored hashed, access tokens are stored per tenant and isolated between accounts, traffic is served over HTTPS, and uploaded media is stored under unguessable filenames. Access requires credentials issued by an administrator.

Children

qpChat is a business tool not directed to children and is not intended for use by anyone under 16.

Changes

We may update this policy; the "Last updated" date above will change accordingly.