Privacy

Last updated 10 October 2026

Who we are

Stonechat is a tool for managing the messages people send to the business accounts you connect, such as a Facebook Page or an Instagram account. You can reach us at [email protected].

What we collect

Your account. Your name, email address and password, so you can sign in. If you join the waitlist before we open, we store only your email address.

Payments. When you subscribe, you pay Paddle.com, our reseller and the merchant of record for every order. Paddle takes your card or other payment details and does not share them with us. We receive your name, email address, country and the state of your subscription, so we know whether your workspace is paid for.

Your connected accounts. When you connect an account, the platform gives us an access token and the name, username and profile picture of that account. We store the token encrypted.

Your conversations. The messages people send to your connected accounts, the replies you send back, and the profile information the platform shares about those people, which is typically their name, profile picture, locale and timezone. We store this so you can read and answer your messages.

Comments. The comments people leave on your connected accounts' posts, with the name of whoever wrote each one, the replies you post under them, and the caption and picture of the post they are on. We store these so you can read and answer comments, and hide or delete them when you ask.

Photos and files. When someone sends a photo or a file to one of your accounts, we keep our own copy of it, and we do the same with profile pictures. The platforms hand us links that stop working after a while, so without a copy your older conversations would lose their attachments. These copies are deleted along with everything else when you delete your data.

What we do with it

We use it to run the product: showing you your conversations and comments, sending your replies through the connected platform, and keeping your account secure. We do not sell your data, and we do not use the contents of your messages to train machine learning models.

To sort your conversations and suggest replies, we send the text of messages to Anthropic, which processes it in the United States on our behalf and does not use it to train its models. We store photos and files with Cloudflare, and we use PostHog in the United States to count how the product is used. These providers process data only for us and under contract.

Cookies

We keep this short list of cookies, and none of them come from advertisers.

Signing in. Once you sign in to the app, a cookie keeps you signed in until you sign out or go 30 days without using it.

How you found us. When a link or another website brings you to Stonechat, a cookie remembers the first one: the site that sent you, any campaign or referral tag in the link, and the page you arrived on. It lasts 60 days, is shared between this site and the app, and a later visit does not change it. If you create an account, we save it with your account, along with any code you enter, so we know which places send people to us and can honor the offer a code carries.

Improving the product. We count visits and the steps people take on this site and in the app, so we can see what works and what does not.

Deleting your data

You can disconnect any connected account at any time from your settings, which removes its stored access token immediately.

To delete your account and everything stored with it, email [email protected] from the address on your account. This removes your account and everything stored with it within 30 days, at no charge.

You can also remove Stonechat from your Facebook or Instagram settings under Business Integrations. That revokes our access straight away and, within 30 days, erases the conversations, people and files we received through that account. Your Stonechat account itself stays, so email us if you want that removed too.

How long we keep it

Conversations stay for as long as your account is open, so your history is there when you need it. When you delete your account, they go with it.

Where we keep it

Our servers and database are in the European Union, in Germany, and your data is held there wherever in the world you and the people messaging you happen to be. The providers named above handle their part in their own locations, which for Anthropic and PostHog is the United States.

Changes

If we change this policy in a way that affects you, we will email you before it takes effect.