Legal
Privacy policy
status: draft, not yet reviewed
Read this first
This is a plain-language skeleton written by the team, not legal advice and not reviewed by a lawyer. It describes what the product appears to do today; every line needs to be checked against reality before it can be published as a policy. The bracketed notes mark what is still missing.
What we collect
When you sign in with Google we receive your name, email address and profile picture. When you train an assistant we store the pages, files and settings you add, and the questions your customers ask it.
We do not ask for anything else, and there is no reason to send us sensitive personal data as training content.
What we do with it
We use it to run the service: to answer your customers from your content, to show you what was asked, and to contact you about your account. We do not sell it.
[needs review: confirm whether any content is used to improve models, and say so plainly either way]
Other services this site loads
The site currently loads Google sign-in, Google Analytics, Vercel Analytics and PostHog product analytics. Each of those sees that you visited and sets its own cookies.
[needs review: confirm this list, add the payment processor and the AI provider, and link their policies]
Cookies
Signing in sets a session cookie so you stay logged in. The analytics services above set their own cookies.
[needs review: whether you need a consent banner for visitors in the EU and UK]
Getting your data out, or deleted
Ask us and we will export or delete your account along with the content trained under it. Deleting a chatbot removes it from your dashboard.
[needs review: how long backups keep a copy after deletion, and how fast you commit to responding]
Where it is processed
The service runs on hosted infrastructure rather than our own machines, so your content is processed by the providers listed above.
[needs review: hosting regions, the full sub-processor list, and transfer terms for customers outside them]
Changes to this policy
If what we collect or who sees it changes, we will update this page and say so by email before the change takes effect.
Contact
Privacy questions and deletion requests can go to [email protected] for now. The terms of service cover the rest of the arrangement.
[needs review: a privacy contact address someone actually monitors]