Mastan AI ("Mastan," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data when you use our AI assistant service via WhatsApp and Telegram.
2. Data We Collect
We collect the following categories of information:
Identity data: Your name (as provided or as shown on your messaging profile) and phone number (WhatsApp) or Telegram user ID.
Conversation data: Messages you send to Mastan and the responses generated, stored to provide context and improve the service.
Payment data: When you make a purchase, payment is processed by Stripe. We receive your name, email, and a payment reference. We do not store your full card number.
Usage data: Timestamps, feature usage patterns, and interaction frequency.
Device/platform data: Information provided by WhatsApp or Telegram APIs (e.g., platform type, profile photo URL).
3. How We Use Your Data
To provide, maintain, and improve the Mastan AI service
To process payments and manage subscriptions
To personalize your experience and maintain conversation context
To communicate with you about service updates or issues
To detect and prevent abuse, fraud, or violations of our Terms
To comply with legal obligations
4. Third-Party Services
Stripe: We use Stripe for payment processing. When you make a payment, your payment information is handled directly by Stripe in accordance with their Privacy Policy. We do not store your credit card details on our servers.
WhatsApp & Telegram: Your messages are transmitted through these platforms, which have their own privacy policies. We receive message content through their official APIs.
AI Model Providers: Your messages may be processed by third-party AI model providers to generate responses. Data sent to these providers is used solely for generating responses and is subject to their data processing agreements with us.
Google Analytics: We may use Google Analytics on our website (mastan.ai) to understand traffic patterns. This may involve cookies and anonymized usage data. Google Analytics does not apply to WhatsApp or Telegram interactions.
5. Data Retention
Conversation data: Retained for as long as your account is active to provide context. You may request deletion at any time.
Payment records: Retained for 7 years to comply with financial record-keeping requirements.
Usage data: Retained in anonymized/aggregated form indefinitely for analytics. Identifiable usage data is deleted within 24 months of your last interaction.
6. Data Sharing
We do not sell, rent, or trade your personal data to third parties. We share data only:
With service providers who process data on our behalf (Stripe, hosting, AI providers) under strict data processing agreements
When required by law, court order, or governmental authority
To protect our rights, safety, or property, or that of our users
7. Your Rights (GDPR & Global)
Regardless of your location, we extend the following rights to all users:
Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate data.
Erasure: Request deletion of your personal data ("right to be forgotten"). We will delete your data within 30 days, except where retention is required by law.
Data portability: Request your data in a structured, machine-readable format.
Restriction: Request that we limit processing of your data.
Objection: Object to processing of your data for specific purposes.
Withdraw consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at privacy@mastan.ai. We will respond within 30 days.
8. Data Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews. However, no method of electronic transmission or storage is 100% secure.
9. Children's Privacy
Mastan is not intended for children under 13. We do not knowingly collect data from children under 13. If we become aware that we have collected data from a child under 13, we will promptly delete it.
10. International Transfers
Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for any international data transfers, including standard contractual clauses where applicable.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the service or our website. The "Last updated" date at the top indicates the most recent revision.
12. Contact
For any privacy-related questions or requests, contact us at: privacy@mastan.ai