Privacy Policy
Last updated: 25 September 2026Who we are
Chronalyx is an AI WhatsApp receptionist for salons, clinics and shops (each called a "business" here). It replies to customer messages, answers questions and books appointments on the business's behalf.
When you message a business that uses Chronalyx, that business is responsible for your data, and we process it on its behalf and according to its instructions in order to provide the service.
What we collect
If you are a customer messaging a business on WhatsApp:
- Your WhatsApp phone number.
- The content of your messages: text, images and voice notes.
- Appointment details: the name you give, the service, date and time, and any note.
If you own or work at a business using the control panel:
- Username, password (stored as a one-way hash) and two-step verification settings.
- Subscription and receipt details, and a log of sign-ins and changes including IP address, for security.
The control panel uses strictly necessary cookies for signing in only. We do not use advertising or tracking cookies.
How we use it
- To reply to your messages and questions about the business's services, prices, hours and location.
- To book, confirm, change and cancel appointments, and to remind you before your appointment.
- To show the business you messaged its appointments and conversations.
- To protect the service from spam and abuse.
We do not sell your data, use it for advertising, or send you marketing messages of our own.
Automated replies and AI
Replies are written automatically by an AI system. To produce a reply, the message content is sent to third-party AI service providers and used only to prepare the reply to you.
Before a message is sent, the system automatically masks long phone numbers and email addresses in it.
Voice notes are converted to text; we keep the text only, not the audio file. Images are analysed to prepare the reply; we do not store the image file on our servers.
AI can make mistakes. The business can review conversations and bookings and confirm or change them, and you can ask to speak to someone at the business at any time.
Who we share it with
- The business you messaged: it sees only your messages and appointments with it, never other businesses' data.
- Providers we need to run the service: the WhatsApp Business Platform to deliver messages, AI providers to prepare replies, and hosting providers. Each uses the data only to provide that service.
- Public authorities, where required by law.
How we protect it
- Personal data (phone numbers, names, message content and notes) is encrypted with AES-256.
- Passwords are stored as one-way hashes, with two-step verification and a temporary lock after failed sign-ins.
- Each business sees only its own data, and sensitive actions are logged.
- Connections to the control panel are encrypted (HTTPS).
How long we keep it
We keep data while the business subscribes to the service, and only as long as the service needs it. When a business asks for its account to be deleted, we delete its data and its customers' related data within 30 days at most.
Old conversations are deleted automatically after one year at most.
You can ask us to delete your data at any time (see below).
Your rights
- Know what data we hold about you and request a copy.
- Ask us to correct anything that is wrong.
- Ask us to delete your data.
- Ask for automated replies to your number to stop, through the business directly or by contacting us.
Data deletion requests
Email us with your WhatsApp phone number, the name of the business you messaged, and that you want your data deleted.
We verify the request, delete the data within 30 days at most, and send you a confirmation.
You can also ask the business itself to delete it.
Children
The service is not directed at anyone under 18. If a child's data was sent by mistake, contact us and we will delete it.
Changes to this policy
We may update this policy when the service or the law changes. The date of the last update is shown at the top.
This policy is governed by the laws of the Hashemite Kingdom of Jordan.
Contact us
For any privacy question or data deletion request, email us at: