Cookie Policy

This Cookie Policy explains how Alden Peak Technologies, incorporated under the laws of the Republic of Tunisia with its registered office at Immeuble Borj Khefacha, 5000 Monastir, Tunisia ("ChattyFlow," "we," "us," or "our"), uses cookies and similar tracking technologies on the ChattyFlow website and platform, accessible at www.chattyflow.com (the "Platform").

This Cookie Policy should be read alongside our Privacy Policy and our Terms of Service, both of which are incorporated by reference.

By continuing to use the Platform after being presented with our cookie consent banner, you acknowledge that you have read and understood this Cookie Policy. For non-essential cookies, we will only deploy them once you have given your explicit consent through our cookie consent banner.

Table of Contents

1. What Are Cookies?
2. Why We Use Cookies
3. Types of Cookies We Use
4. Detailed Cookie Inventory
5. Third-Party Cookies
6. Your Cookie Choices and How to Manage Them
7. Cookie Consent Banner
8. Impact of Disabling Cookies
9. Changes to This Cookie Policy
10. Contact Us

1. What Are Cookies?

Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website or use an online platform. Cookies are widely used to make websites and platforms work more efficiently, to remember your preferences, and to provide analytical information to site operators.

In addition to traditional cookies, we also use similar tracking technologies, including:

• Web beacons: Small transparent images embedded in web pages or emails that allow us to track whether a page has been viewed or an email has been opened.
• Pixel tags: Tiny pieces of code embedded in web pages that collect information about how users interact with a page.
• Session recording scripts: Scripts that capture user interactions with the Platform, such as mouse movements, clicks, and scrolling behavior, for usability analysis purposes.
• Local storage: A browser feature that allows websites to store data locally on your device, similar in function to cookies but with greater storage capacity.

Throughout this Cookie Policy, we use the term "cookies" to refer collectively to all of these tracking technologies unless otherwise specified.

2. Why We Use Cookies

We use cookies for the following core purposes:

• To operate the Platform: Certain cookies are essential to enable the basic functionality of the Platform, including user authentication, session management, and security features. Without these cookies, the Platform cannot function correctly.
• To remember your preferences: We use cookies to remember information about your session, such as your login state and interface preferences, so you do not need to re-enter information each time you visit.
• To analyze usage and improve the Platform: We use analytics cookies to understand how users interact with the Platform, which features are most used, and where users encounter difficulties. This helps us make informed improvements.
• To record user sessions for usability research: We use session recording technology to capture anonymized recordings of user interactions with the Platform, helping us identify and resolve usability issues.
• To manage your consent: We use a consent management cookie to record your cookie preferences so that we honor your choices consistently across visits.
• To facilitate secure payments: Our payment processor (ClicToPay, operated by Société Monétique Tunisie) will use cookies during checkout to facilitate secure card payment transactions and prevent fraud once activated; the ClicToPay integration is currently pending.

We do not use cookies for targeted advertising, behavioral advertising, or to build advertising profiles about you.

3. Types of Cookies We Use

We classify the cookies used on the Platform into the following categories:

3.1 Essential Cookies (Strictly Necessary)

Essential cookies are required for the Platform to operate. They enable core functionality such as user authentication, session security, and navigation. Essential cookies are deployed on the basis of operational necessity and do not require your consent. You cannot opt out of essential cookies without significantly impairing the functionality of the Platform.

Examples of what essential cookies do:

• Maintain your logged-in session while you navigate the Platform
• Store a session token to authenticate your identity securely
• Prevent cross-site request forgery (CSRF) attacks
• Remember your cookie consent preferences (managed via CookieYes)

3.2 Analytics Cookies

Analytics cookies collect information about how users interact with the Platform, such as which pages are visited most frequently, how long users spend on each page, and where users navigate from. This data is used in aggregated and anonymized form to help us understand usage patterns and improve the Platform.

We use Google Analytics to provide this service. Google Analytics may collect your IP address, browser type, device information, and browsing behavior on the Platform. We have configured Google Analytics to anonymize IP addresses.

Analytics cookies are non-essential and are only deployed with your prior consent.

3.3 Session Recording Cookies (Mouseflow)

We use Mouseflow to record user sessions on the Platform. Mouseflow captures mouse movements, clicks, scrolling behavior, and form interactions (excluding passwords and sensitive payment fields) to generate heatmaps and session playbacks. This helps us identify usability problems and improve the user experience.

Mouseflow data is stored on servers located within the European Union. Session recordings are anonymized and do not capture personally identifiable information such as passwords, payment card numbers, or other sensitive data.

Session recording cookies are non-essential and are only deployed with your prior consent.

3.4 Consent Management Cookies (CookieYes)

CookieYes places a cookie on your device to remember whether you have accepted, rejected, or customized your cookie choices, and to ensure that your preferences are consistently applied across your visits to the Platform.

The consent record stored by CookieYes is considered an essential cookie as it is necessary to comply with our legal obligation to obtain and honor cookie consent.

3.5 Payment Processing Cookies (ClicToPay — pending activation)

Our card payment processor may set cookies during checkout to facilitate secure payment transactions. These cookies help prevent fraud, maintain the integrity of the payment session, and comply with payment security standards.

• ClicToPay (Société Monétique Tunisie): ClicToPay will set cookies during a card payment session to recognize your browser and detect fraudulent activity once the integration is activated (currently pending). ClicToPay's cookie practices are governed by its policies available at clictopay.com.

Payment processing cookies are only active during card payment transactions and are considered operationally necessary for the completion of a secure payment.

4. Detailed Cookie Inventory

The table below provides a detailed inventory of the specific cookies currently in use on the Platform. This list may be updated from time to time as we add or remove services.

Note: ClicToPay payment-processor cookies will be added to this inventory once the ClicToPay integration is activated (currently pending). They are not currently set.

Note: Cookie names, durations, and purposes may change as our technology providers update their services. We aim to keep this inventory up to date. For the most current list of cookies, you may also review the cookie consent banner settings managed by CookieYes when you visit the Platform.

5. Third-Party Cookies

Some cookies on the Platform are set by third-party service providers rather than directly by ChattyFlow. These third-party cookies are subject to the privacy and cookie policies of those providers. We do not control the content or use of third-party cookies beyond the instructions we have provided to each provider.

The third parties who may set cookies through the Platform are:

• Google LLC (Google Analytics): Analytics cookies. Privacy Policy · Cookie Policy
• Mouseflow, Inc.: Session recording cookies. Privacy Policy · Opt-out
• Cloudflare, Inc.: Strictly-necessary security and bot-detection cookies (__cf_bm). Privacy Policy
• CookieYes Limited: Consent management cookies. Privacy Policy
• ClicToPay (Société Monétique Tunisie): Payment processing cookies (pending activation). clictopay.com

6. Your Cookie Choices and How to Manage Them

You have several options for managing or limiting the use of cookies on the Platform:

6.1 Cookie Consent Banner (CookieYes)

When you first visit the ChattyFlow website or Platform, a cookie consent banner will appear. Through this banner, you can:

• Accept all cookies (essential and non-essential)
• Reject all non-essential cookies
• Customize your preferences by cookie category (analytics, session recording)

Your preferences will be saved and applied to all subsequent visits. You can change your preferences at any time by accessing the cookie settings link available in the footer of our website.

6.2 Browser Settings

Most web browsers allow you to manage cookies through their settings. You can typically:

• View which cookies are stored on your device
• Delete individual cookies or all cookies stored by a specific website
• Block all cookies or cookies from specific websites
• Set your browser to notify you before a cookie is placed

Instructions for managing cookies in common browsers:

• Google Chrome: Settings > Privacy and security > Cookies and other site data
• Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
• Apple Safari: Preferences > Privacy > Manage Website Data
• Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies

Please be aware that blocking cookies through your browser settings may affect your ability to use the Platform correctly, including preventing you from logging in or accessing certain features. Refer to Section 8 for more detail on the impact of disabling specific cookies.

6.3 Opt-Out Tools Provided by Third Parties

You may also use the following tools provided by our third-party service providers to opt out of their specific data collection activities:

• Google Analytics opt-out: Install the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout
• Mouseflow opt-out: Visit mouseflow.com/opt-out to opt out of Mouseflow session recording across all websites that use Mouseflow.

6.4 Do Not Track

"Do Not Track" (DNT) is a browser setting that allows users to signal to websites that they do not wish to be tracked. Currently, there is no universally accepted standard for responding to DNT signals, and our Platform does not alter its data collection practices based on DNT signals. However, you can use the consent management tools described above to control non-essential cookies independently of your browser's DNT setting.

7. Cookie Consent Banner

Our cookie consent banner is powered by CookieYes and is displayed to all new visitors upon their first access to the ChattyFlow website or Platform. The banner:

• Clearly identifies the categories of cookies in use
• Provides you with the ability to accept, reject, or customize non-essential cookies before they are deployed
• Records your consent choice along with a timestamp and stores it in a consent cookie on your device
• Allows you to revisit and update your preferences at any time via the cookie settings link in our website footer

Essential cookies and the CookieYes consent management cookie are placed immediately upon your visit, as they are strictly necessary to operate the Platform and to honor your consent preferences. No other non-essential cookies are placed until you have made your selection in the consent banner.

Consent records are retained for twelve (12) months, after which the consent banner will reappear to allow you to renew or update your preferences.

8. Impact of Disabling Cookies

The impact of disabling or blocking certain cookies depends on which category of cookie is affected. Disabling essential cookies may prevent you from logging in or using core Platform features. Disabling analytics or session recording cookies will not affect Platform functionality but will limit our ability to understand and improve the user experience.

9. Changes to This Cookie Policy

We reserve the right to update or amend this Cookie Policy at any time to reflect changes in the cookies and tracking technologies we use, applicable law, or the Services we provide. When we make material changes, we will notify you by posting a prominent notice on the Platform and, where appropriate, by sending an email to your registered address. The updated Cookie Policy will display its revised effective date at the top of the document.

Your continued use of the Platform after the effective date of any updated Cookie Policy constitutes your acknowledgment of the changes. Where updated cookies require fresh consent, the CookieYes consent banner will reappear to allow you to review and confirm your preferences.

We encourage you to review this Cookie Policy periodically to stay informed about our use of cookies and tracking technologies.

10. Contact Us

If you have any questions, concerns, or requests regarding this Cookie Policy or our use of cookies and tracking technologies, please contact us:

We will endeavor to respond to all cookie-related inquiries within ten (10) business days.