Privacy Policy

1. Information We Collect

We collect information you provide directly and data generated through your use of the Service:

• Account Information: Name, email address, agency name, billing address, and payment details.
• Client Data: Information you upload about your clients, including knowledge bases and chatbot configurations.
• Usage Data: Log data, analytics, feature usage, IP addresses, browser type, and device information.
• Communications: Messages you send to us through support channels or the contact form.

2. How We Use Your Information

• To provide, operate, and maintain the Service.
• To process payments and manage your subscription.
• To send transactional communications (account updates, billing receipts, security alerts).
• To improve the platform, develop new features, and fix issues.
• To provide customer support and respond to inquiries.
• To detect, prevent, and address fraud, abuse, and security incidents.
• To comply with legal obligations.

We do not sell your personal information or use your client data to train AI models. Your client data is processed solely to deliver the chatbot services you have configured.

3. Data Sharing

We share information only in the following circumstances:

• Service Providers: Third-party vendors who assist in operating the Service (e.g., payment processors, cloud infrastructure, email delivery). These providers are bound by contractual obligations to protect your data.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate safeguards for your data.
• With Your Consent: When you have given explicit permission for a specific disclosure.

4. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS 1.3) and at rest, per-tenant data isolation, and regular security audits. Our infrastructure is built on Cloudflare's global edge network, which provides enterprise-grade DDoS protection and Web Application Firewall (WAF) capabilities. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal data, subject to legal retention requirements.
• Portability: Request a machine-readable export of your data.
• Objection: Object to certain types of processing, such as direct marketing.

To exercise any of these rights, contact us through the information provided below. We will respond within 30 days.

6. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you (providing the platform, managing subscriptions, processing payments).
• Legitimate Interests: Processing necessary for our legitimate business interests (improving our Service, fraud prevention, analytics), provided these do not override your rights.
• Consent: Where you have given explicit consent (marketing communications, optional analytics). You may withdraw consent at any time.
• Legal Obligation: Processing required to comply with applicable laws (tax reporting, responding to lawful requests).

7. International Data Transfers

Your data may be processed in the United States or other countries where our service providers operate. When we transfer personal data outside the EEA, UK, or Switzerland, we rely on:

• Standard Contractual Clauses (SCCs): EU-approved contractual terms providing adequate data protection guarantees.
• Adequacy Decisions: Transfers to countries deemed adequate by the European Commission.
• Data Processing Agreements: Binding agreements with sub-processors that include appropriate data protection obligations.

Our primary infrastructure provider, Cloudflare, maintains compliance with EU-US data transfer requirements. You may request a copy of the safeguards we use by contacting us.

8. Right to Lodge a Complaint

If you are located in the EEA, UK, or Switzerland and believe that our processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with your local supervisory authority. A list of EEA supervisory authorities is available at edpb.europa.eu.

We encourage you to contact us first so we can address your concerns directly.

9. Data Protection Officer

For all data protection inquiries, you may contact our Data Protection Officer:

10. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: