Privacy policy

Information from businesses

When you create an account we collect your name, email address and a password (stored only in hashed form), or your Google account's name and email if you sign in with Google.

You also give us information about your business: its name, industry, website, phone numbers, working hours, and the content you add to your knowledge base such as website pages, files, FAQs and notes.

Information from chat visitors

When someone chats through a widget, we store the messages they send and the replies they receive, together with an anonymous visitor identifier kept in their browser for the length of the session.

If the visitor chooses to share a name, phone number or email address, it is saved as a lead for the business they are talking to. The business is responsible for how it uses those details.

How information is used

To provide the service: answering visitors' questions using the business's own knowledge base, showing conversations and leads to the business, and sending notification emails.

To keep the service secure and within fair use, for example rate limiting and counting messages against a plan.

We do not sell personal information, and one business's content is never used to answer another business's customers.

Service providers

Messages and knowledge base content are sent to OpenAI to generate answers and to prepare content for search. Data is stored in a managed PostgreSQL database and the application runs on cloud hosting. Email notifications are delivered through an email provider. If a business turns on WhatsApp alerts for its team, the alert, which includes the visitor's name and their last message, is delivered through Meta's WhatsApp Business platform.

These providers process information on our behalf and only to deliver the service.

Cookies

The dashboard uses a small number of cookies that are necessary for it to work: one to keep you signed in, one to remember your workspace and one for your language. The chat widget stores its visitor identifier in the browser's session storage. We do not use advertising cookies.

Retention and deletion

Conversations, leads and knowledge base content are kept for as long as the business's workspace exists. A business can delete knowledge sources at any time, and can ask us to delete its workspace and all associated data.

Visitors who want their conversation or contact details removed should contact the business they chatted with, or us.

Your rights

Depending on where you live, you may have the right to access, correct or delete your personal information under the data protection laws that apply to you. Contact us and we will respond within a reasonable time.

Changes and contact

We may update this policy as the service changes and will revise the date above when we do. Questions about privacy can be sent to the contact address at the bottom of this page.