1. Data We Collect
Account data: name, email address, password (hashed), plan, and authentication method (email or Google sign-in).
Platform data: the chatbots you create, knowledge-base content you upload or scrape from websites you own or control, chatbot widget settings, API keys you enter (OpenAI, Google Places, WhatsApp gateways), and usage metrics (messages, storage, pages scraped).
Conversation data: messages exchanged with your chatbots, on the website widget and through connected WhatsApp sessions, used to maintain conversation context and display history.
Technical data: IP address, browser user-agent, and session timestamps for security and abuse prevention.
Contact form: if you write to us, we keep your name, email, subject, and message.
2. How We Use Data
- To operate the Service: authenticate you, run your chatbots, answer end-user questions using your knowledge base and AI models;
- To enforce plan quotas (chatbots, storage, messages) and bill paid subscriptions;
- To send transactional emails: account verification, password resets, plan confirmations;
- To protect the platform: detect abuse, fraud, and unauthorized access;
- To comply with legal obligations.
We do not sell your personal data and we do not use your content to train third-party AI models.
4. Your Chatbots & End Users
If you deploy a chatbot that interacts with third parties (your customers), you act as the data controller for those conversations and we act as the processor. You must:
- Disclose to end users that they are chatting with an AI assistant;
- Provide any legally required privacy notice to your end users;
- Only collect personal data from end users that is necessary for your purpose.
Chatbot conversation data can be deleted at any time from your dashboard, and form data collected during conversations is automatically removed after 10 hours.
5. Data Retention
Account and platform data are kept for as long as your account is active. Inactive conversation history is retained per your settings and can be cleared manually. If you delete your account, personal data is deleted within 30 days, except data we must keep for legal, accounting, or security purposes.
6. Security
We apply industry-standard safeguards: TLS encryption in transit, hashed passwords, CSRF protection, session hardening, and strict access controls. API keys you store (OpenAI, WhatsApp, Google) are kept confidential and never displayed in full after being saved. No system is perfectly secure; please use strong, unique passwords and report any suspected vulnerability via our contact page.
7. Your Rights (GDPR)
Depending on your jurisdiction, you have the right to access, rectify, export, and delete your personal data, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority.
To exercise any of these rights, contact us from your registered email address via the contact page. We respond within 30 days.
9. Contact
For any privacy question, request, or complaint, reach us through the contact page.