隐私政策

Who we are

Chatsoon is operated by Moshi Concepts Inc., which is responsible for the personal information described in this policy. If you have a question about this policy or your data, email hello@chatsoon.app.

What we collect

We collect only what Chatsoon needs to work. We don't access your phone's address book or your location, and we only receive the photos and images you choose to take or upload.

• Account: your email address. We use it to send you one-time sign-in codes, to identify your account and to let you know when someone sends you their details with the Connect form. Chatsoon doesn't use passwords.
• Your public profile: the name, photo, headline, company, role and links (X, Telegram, Discord, LinkedIn, website, YouTube) you choose to publish, if you add a brand style, its colours, one logo image (a PNG you upload and confirm you have the right to use) and one background image (a JPEG, PNG or WebP you upload and confirm you have the right to use), and, if you add them, your mobile number, WhatsApp and Signal details and who can see them, and whether you want it shown in search engines.
• Payout wallet addresses: if you add a Bitcoin, Cardano, Ethereum, Midnight or Solana wallet address, or a Cardano ADA Handle, to your profile, we store it privately as wallet addresses you add for rewards, so we can pay out things like future Learn Cardano bounty rewards. Only you can see them; they are never shown on your public profile, your vCard, a link preview, a Wallet pass or to anyone else.
• Your contacts: the people you add and what you record about them, such as their name, company, role, email, phone, social handles, notes, tags, priority and the event where you met, plus whether and when you followed up with them and your reminder settings.
• Card and badge photos: photos you take of business cards or event badges so Chatsoon can read the details for you.
• Connections: when you connect with another Chatsoon user by scanning their QR code, we record that you are connected and, if you set one, the event where you met.
• Connect form submissions: when someone sends you their details from your public profile page, we store the name, email address and note they entered, and email you to say they connected. If they tick the tips emails checkbox, we also store that choice and when they agreed to it.
• Reports and blocks: if you report or block someone, we store the block, or the report (who or what it's about, the reason and any details you add, and for a reported Connect form message, a copy of that message), and send the report to our moderation inbox for review.
• Platform and activity: which kind of device you use Chatsoon on (the website on a phone or a computer, the iPhone app or the Android app), the one you created your profile on, and the days you use Chatsoon. This is kept with your account. We don't keep your IP address, device model or browser string for this.
• Language: the language you use Chatsoon in (the one you choose in Me > Preferences > Language, or your phone's), kept with your account so the emails and notifications we send you are in that language. When someone sends you their details with the Connect form, we also keep the language of the page they used, for any tips emails they asked for.
• Technical logs: basic information our servers record when the app or website makes a request, such as IP address, device and browser type, and the time and result of the request.
• Error reports: when something goes wrong in the Chatsoon apps, on the website or on our servers, we record the error: its type and message, which screen or feature it happened in (never the link you were on, a search or anything you typed), the app version, the kind of device and browser, and, if you are signed in, your account ID. A report has no place for your name or email address, and the message is checked automatically to remove email addresses, phone numbers, long codes and anything in quotation marks before it is stored. That check cannot recognise every name written in plain text, which is one reason reports are deleted after 30 days. Error reports set no cookies and store nothing on your device, and we use them only to find and fix problems.

Signing in and connecting accounts with Google, Apple, LinkedIn, X or Discord

If you choose to sign in, create your account, or connect a further account afterwards from Me > Connected accounts, with Google, Apple, LinkedIn, X or Discord, that service shares your name, email address and profile photo with us, and your username for Discord or X, so we can create or sign in to your account, prefill your profile, or link the account to the one you're signed in to. X doesn't share an email address with us. We don't receive your password for that service.

• We don't post anything on your behalf, and we don't read your contacts or messages on that service.
• You can disconnect Chatsoon from that service any time in its own account settings.
• If you use Apple's "Hide My Email", the private address it gives us still works for signing in and for anything we email you.
• For Discord, we also record whether two-factor authentication was turned on when you connected it. For X, we record its verification status and follower count at the time you connected it. We use this only to help confirm the account belongs to a real person.
• On Me > Connected accounts, we show you the email address or handle each connected service most recently reported, so you can tell which account is linked.
• You can disconnect a connected account from Chatsoon at any time on Me > Connected accounts, and connect it again later. When you disconnect it, we delete the check details we stored for it (for Discord whether two-factor authentication was on, for X its verification status and follower count) and, for Discord, the username we kept.
• So that one Google, Apple, LinkedIn, X or Discord account can confirm only one Chatsoon profile as a real person, we keep a one-way fingerprint of that account's ID: a scrambled value we can't turn back into the ID. It stays after you disconnect the account, and we delete it when you delete your Chatsoon account.

How we use your information

• To sign you in and keep your account secure.
• To show your public profile to the people you share it with and, if you turn on search visibility, to search engines.
• To store your contacts, notes and tags and keep them in sync across your devices.
• To read the details from card and badge photos when you use card scanning.
• To deliver connections and connect form submissions to you.
• To review reports, enforce our Terms of Use and protect people from spam and abuse.
• To count how Chatsoon is used, for example how many people use it and on which devices, and to publish those totals (see Usage statistics below).
• To run, maintain, secure and fix the service.

No ads, no tracking, no selling

We don't use your information for advertising, we don't build advertising profiles, and we don't track you across other companies' apps or websites. We don't sell or rent your personal information to anyone. If you accept analytics cookies on our website, Google Analytics measures how chatsoon.app is used (see Analytics cookies below); we have Google's advertising features switched off, and it isn't used for advertising. We also count how Chatsoon is used when you are signed in, without cookies and whatever you choose about analytics cookies (see Usage statistics below).

Analytics cookies

Analytics cookies: with your permission, chatsoon.app uses Google Analytics to understand how the website and web app are used, for example which pages are visited and how people found us. Google Analytics sets cookies and collects information such as pages viewed, the device and browser, approximate location based on IP address, and how you arrived. It is only turned on if you choose Accept in the cookie banner; if you choose Decline or make no choice, it isn't loaded at all. You can change your choice any time with Cookie settings at the bottom of any page or in the Me tab. Google processes this data under its own privacy policy (https://policies.google.com/privacy). The Chatsoon iPhone and Android apps don't use Google Analytics.

Counting how Chatsoon is used when you are signed in (see Usage statistics below) uses no cookies. It is separate from this choice, and declining analytics cookies doesn't switch it off.

Usage statistics

We count how Chatsoon is used, for example how many people are members, how many are active, how many come back and how many connections are made at an event. You are active on a day when you open Chatsoon signed in. We publish totals like these on chatsoon.app/stats, and we may share them with investors and partners.

These are counts across all accounts, not linked to your account. They never show your name, email address or profile link, or what any one person does in Chatsoon. We don't show a group smaller than 10.

Authorised Chatsoon staff can see usage for individual accounts in a private view. Your profile link is partly hidden there.

These counts use no cookies. They are separate from the analytics cookies choice, and declining analytics cookies doesn't switch them off.

Counts that have already been published are kept after you delete your account. The days you use Chatsoon are kept for a limited time (see Retention and deletion).

Your public profile

Your public profile is public. Anyone who scans your QR code or has your link, which looks like chatsoon.app/id/alex-rivera-7f3a, can see it and save it as a contact card. It shows only what you add to your profile: your name, photo, headline, role, company and links and, if you add a brand style, its colours, your logo and your background image.

Your email address is never shown on your public profile.

Your contacts, notes, tags and priorities are private to you. If you add a mobile number, WhatsApp or Signal, you choose who can see them: people you connect with (Chatsoon users you connect with, and people who send you their details with the Connect form on your page), or anyone with your link. Blocking someone stops them getting these details through the Connect form too, when they send it signed in or with the email address on their Chatsoon account, or once you've reported a message from that address. They're never included in the page we give search engines, in our sitemap or in link previews. Tapping WhatsApp or Signal opens that app; Chatsoon doesn't send your details to WhatsApp or Signal.

Search engines: your public profile isn't shown in search engines unless you turn on Show my profile in search engines in Edit profile. When it's on, search engines such as Google and Bing, and AI search services that follow the same rules, can show your name, photo, headline, role, company and links, and we list your profile in our sitemap. We ask AI companies' training crawlers not to collect public profiles. When you turn it off or delete your account, we tell search engines to drop your profile and take it out of our sitemap straight away. Most search engines drop it within a few weeks, but we can't control copies they or other sites have already made.

People you connect with see your public profile and, if you added them, your phone and messaging details. If you let anyone with your link see them, blocking someone doesn't hide them from that person when they're signed out.

Booking links you add (such as Calendly or Google Calendar) are shown on your public profile. When someone books, they do it on that service's page, under its own terms and privacy policy. Chatsoon doesn't see or store the booking.

When you share your profile link in apps such as LinkedIn, WhatsApp, Slack, X or iMessage, the app shows a link preview made from your public profile: an image with your name, photo, role, company and headline, and the same details as text. For a profile with a brand, the preview image also shows the brand's colours and logo. Your phone, WhatsApp and Signal details are never included in link previews. When you change your profile, new previews show the change, but apps that already made a preview may keep showing their copy for a while, and we can't remove copies they've made.

If you add your Chatsoon card to Apple Wallet or Google Wallet, it shows your name, role, company and a QR code linking to your public profile, plus your photo on Apple Wallet if you have one, and your brand logo if you added one — the same information anyone with your link can already see. An Apple Wallet card carries your logo inside the card itself. For Google Wallet, we give Google a public chatsoon.app address for your logo, and Google fetches it and keeps its own copy. It doesn't update automatically if you change your profile; remove and re-add it to refresh it. Google Wallet cards are created and stored through Google's Wallet service (see Service providers). If you delete your account, we ask Google to expire a Google Wallet card straight away; an Apple Wallet card can't be revoked remotely and stays on your device until you remove it yourself.

Follow-up reminders (iPhone and Android apps): if you allow notifications, we store a device push token and your time zone, and use them only to send you a push notification on mornings when someone you saved is due for a follow-up. The notification shows a contact's name and how many people are due. It is delivered through Expo's push notification service and Apple's or Google's notification service. You can turn it off in Me › Preferences or in your phone's notification settings. We remove the token when you sign out, and delete it and your setting when you delete your account.

Connecting with people

When two Chatsoon users connect by scanning a QR code in the app, each of them receives the other's public profile, including their mobile number if they added one, as a contact. That copy stays in their contacts if you later change or remove your number.

When you fill in the Connect form on someone's public profile page, the name, email address and note you enter are sent to that profile's owner and saved in their contacts. Only share details you're happy for them to have. Once they have your details, the profile owner is responsible for how they use them. The form is protected by Cloudflare Turnstile, which checks that a person, not a bot, is sending it. The form also has an optional box to email you tips for setting up your own free Chatsoon profile; see Emails we send below.

Emails we send

Account emails: sign-in codes, notices when someone connects with you, and account deletion notices. These are part of the service and can't be turned off while you have an account.

Tips for people who connect with you: if you tick "Email me tips to set up my own free Chatsoon profile" on a Connect form, we send up to three emails over about a week about creating a free profile, and stop when you sign up or unsubscribe. We keep a record of when you agreed and the wording you agreed to.

Tips for account holders: after you sign up, we may send up to two emails with tips for finishing your profile and sharing your link. Turn them off in Me › Tips emails or with the unsubscribe link in any tips email.

Referral invites: if you enter someone's email address to invite them to Chatsoon, we send that person one email on your behalf, naming you as the sender, and never a follow-up. If they unsubscribe, we don't email that address again for any referral.

Every tips or invite email has an unsubscribe link and identifies us, and we never include other people's messages in them.

Referrals, points and badges

If you refer people to Chatsoon, we keep a record of your referral code, who signed up with it and whether it qualified, so we can credit you and show you the status. We also record a device identifier generated on the phone or browser that entered a code, and a scrambled (hashed) version of the IP address and browser/app information involved, which we use only to check for abuse such as one person creating many fake referrals; we don't use these for any other purpose.

Qualifying referrals earn points and, at set milestones, a permanent badge (such as Founding member) shown on your profile. Points and badges aren't money and can't be transferred or cashed out directly.

Reaching the reward milestone means you've earned a future bounty with our reward partner, Learn Cardano Bounties, redeemable once claiming opens - we don't share anything with them before then. When you do claim it, we share your name and email address with Learn Cardano Bounties, only after you tick the consent box to do so. What happens with your details after that is covered by that partner's own privacy policy.

Card scanning and AI follow-up drafts

When you photograph a business card or badge, the photo is stored privately in your account and sent to Anthropic's Claude AI model, which reads the text and returns the details for you to review. Anthropic processes the photo on our behalf only to provide this service. Under Anthropic's commercial terms, it does not use this data to train its models.

When you ask Chatsoon to write a first draft of a follow-up message, that contact's details and your notes about them are sent to Anthropic's Claude AI model to write the draft. We only do this after you give your permission, and, under Anthropic's commercial terms, it does not use this data to train its models.

Service providers

We use a small number of providers to run Chatsoon. Except for Google as described below, they process personal information only on our instructions and only to provide their service to us:

• Cloudflare, Inc.: hosts our servers, database and file storage (including profile and card photos, brand logos and brand background images), and our copy of uploaded files, serves the website, and provides Turnstile bot protection for the Connect form.
• Backblaze, Inc.: stores a weekly encrypted copy of our database for disaster recovery. Backblaze can't read it, and each copy is deleted within 30 days.
• GitHub, Inc.: runs the weekly job that makes that encrypted copy. Your data passes through GitHub's servers only while the job runs.
• Anthropic, PBC: reads card and badge photos when you use card scanning, and writes follow-up message drafts when you ask for one.
• Resend: sends Chatsoon's emails, such as your sign-in codes and connect notifications.
• Expo (Expo Application Services): delivers follow-up reminder push notifications to your device, together with Apple's and Google's notification services. It receives your device push token and the notification text.
• Google LLC (Android app only): the QR code scanner uses Google ML Kit, which sends Google basic device and app information, performance metrics, error codes and a per-installation identifier to measure and improve the scanner. The iPhone app doesn't use ML Kit.
• Google LLC: when you add your Chatsoon card to Google Wallet (on Android or on the web), we send Google your public profile's name, role, company and profile link and, if your brand has a logo, a public chatsoon.app address for that logo, which Google fetches and stores, so it can create the pass. If your brand has a logo, we send this from our servers when you tap Add to Google Wallet, so Google holds your card even if you don't finish adding it, and tapping the button again updates it. Google stores and serves the pass back to you through the Wallet app.

Sharing and international transfers

We don't share your personal information with anyone except the providers above, the people you choose to share with (for example through your public profile, a connection, or a referral reward claim as described in Referrals, points and badges), and where the law requires it or it is needed to protect the rights, safety or property of our users, the public or Moshi Concepts Inc.

Our providers may process information in the United States and other countries. Where the law requires it, we use appropriate safeguards for these transfers.

Apple and Google run the app stores you download Chatsoon from and handle any information they collect under their own privacy policies.

Retention and deletion

• We keep your information for as long as your account is open.
• You can delete your account at any time: open the Me tab in the app, or sign in at https://chatsoon.app and open the Me tab, then tap Delete account. Your public profile link stops working straight away, and 24 hours later we permanently delete your account, profile, contacts, notes, tags, connections and the files you uploaded, including profile and card photos, your brand logo, your brand background image and the link preview images made from your profile. We email you a link to cancel during those 24 hours, and a final email once it's done. You can also email hello@chatsoon.app from the address you sign in with and we will delete it within 30 days.
• A brand logo or background image you replace or remove is kept privately for up to 30 days, so we can review it if it was reported, and then deleted. Deleting your account deletes it straight away.
• We keep backups for disaster recovery: our database provider's backups, a copy of uploaded files kept with our hosting provider, and a weekly encrypted copy of the database stored with a separate provider. Deleted data rolls off all of these automatically, within 30 days.
• Reports you made, reports made about you and your blocks are deleted with your account. Copies of reports already sent to our moderation inbox may be kept until we finish reviewing them.
• Contacts that other people saved about you, for example from your public profile or a connection, belong to their accounts and are not removed when you delete yours. You can ask them to remove it, or email us.
• An email address you invite is kept for up to 12 months, or deleted sooner once they join Chatsoon. If they unsubscribe, we keep only the fact that the address must not be emailed again, so we can honour that.
• If someone ticks the tips emails checkbox on the Connect form but never confirms the one email we send asking them to, we delete that record after 30 days. If they confirm but never sign up, we delete it 30 days after the tips emails finish.
• The scrambled (hashed) IP address and browser/app information referrals record (see Referrals, points and badges) is only used to check for abuse. We clear it about 90 days after a referral is credited, rejected or expires; the referral record itself (whether it counted, and any points or badge it earned) is kept.
• The days you open Chatsoon, and the platform you used on each, are kept for up to 13 months and then deleted, or straight away if you delete your account. The record of which platforms you have used, and the one you created your profile on, are deleted with your account. Published usage statistics are counts across all accounts, so they are kept (see Usage statistics).
• Error reports are deleted after 30 days, and straight away if you delete your account.
• Technical logs are kept for a short time, no more than 30 days, unless we need them longer to investigate abuse or a security issue.

Export your data

You can download all your contacts as a CSV file at any time: open the Me tab in the app and tap Export contacts (CSV). You can open it in Excel, Google Sheets or Numbers, or import it into another tool.

Payout wallet addresses aren't part of that CSV. You can see everything Chatsoon holds for you there any time in Edit profile's Wallets section.

Your choices and rights

You can view, change and delete your information in the app at any time, and export your contacts as a CSV file (see Export your data above). Depending on where you live, you may also have the right to access, correct, delete or move your personal information, and to object to or limit how we use it. To make a request, email hello@chatsoon.app from the address you sign in with. We'll respond within 30 days. You can also complain to your local data protection authority.

Security

Every connection to Chatsoon is encrypted with HTTPS, our hosting provider encrypts stored data, and the database copy we keep with a separate provider is encrypted before it is stored there. Sign-in uses one-time codes instead of passwords. Photos are stored privately and can only be opened through signed links that expire. Every request for private data is checked against your account, so no one else can see your contacts, notes or tags.

No system is perfectly secure. If you find a security problem, please tell us at hello@chatsoon.app.

Age requirement

Chatsoon is for adults. You must be 18 or older to use it. We don't knowingly collect information from anyone under 18. If you believe someone under 18 has given us their information, email hello@chatsoon.app and we'll delete it.

Changes to this policy

We'll update this page when our practices change and change the date at the top. If a change is significant, we'll let you know in the app or by email before it takes effect.

Contact us

Moshi Concepts Inc. Email hello@chatsoon.app with any question about privacy or your data.