Privacy Policy
Last updated: 2026-02-27
1. Information We Collect
We collect information you provide directly (name, email, business details), usage data (conversations, bot configurations), and technical data (anonymized IP address, browser type, device information). Chat widget visitors' IP addresses are anonymized (last octet zeroed) before storage.
2. How We Use Your Information
We use your information to provide and improve the Service, process payments, send important notifications, provide customer support, and comply with legal obligations.
3. Legal Basis for Processing
We process your data based on: (a) contractual necessity, to provide the Service you subscribed to; (b) legitimate interest, for analytics, fraud prevention, and service improvement; (c) consent, for optional analytics cookies and marketing communications; (d) legal obligation, for tax and regulatory compliance.
4. Data Storage & Security
Your data is stored on secure servers with encryption at rest and in transit. We implement industry-standard security measures to protect your information. Conversation data is processed by AI providers and is not used for training.
5. Third-Party Data Processors
We share data with the following service providers who process data on our behalf: OpenAI, Anthropic, and Google (AI model providers for chatbot responses); Pinecone (vector database for knowledge retrieval); Tap Payments (payment processing); Resend (transactional email delivery); Cloudflare R2 (file storage); Google reCAPTCHA (spam protection, when enabled). These providers may process data outside the EEA; we rely on Standard Contractual Clauses (SCCs) or adequacy decisions for international transfers.
6. Data Sharing
We do not sell your personal data. We share data only with the third-party processors listed above and when required by law.
7. Cookies
We use essential cookies for authentication and session management, and preference cookies to remember your language and settings. If you consent, we may also use analytics cookies (Google Analytics, Meta Pixel, and similar) to improve our service. When enabled, Google reCAPTCHA may collect your IP address, browser information, and interaction data to protect against spam. This data is subject to Google's Privacy Policy. You can manage your cookie preferences at any time via the cookie banner.
8. Data Retention
Account data is retained while your account is active. Conversations expire after 24 hours by default. Expired sessions are purged automatically. Audit logs are retained for 90 days. Upon account deletion, all associated data is permanently removed within 30 days, including external storage (AI vector databases and file storage). Invoices are kept for as long as accounting and tax law requires, with all personal details removed.
9. Your Rights
Under GDPR, you have the right to: access your personal data; rectify inaccurate data; erase your data (right to be forgotten); restrict or object to processing; data portability (export as CSV). You can export your data from the dashboard settings and delete your account at any time. You also have the right to lodge a complaint with your local data protection supervisory authority.
10. Contact
For privacy concerns, contact our Data Protection Officer at [email protected].