Privacy Policy

Account data: your name, email address, organization name, and hashed password. Passwords are stored only as bcrypt hashes and are never recoverable by us.

Content you upload: the documents you add to a knowledge base, and the text extracted from them so your AI agent can answer from it.

Conversations: messages exchanged between your website visitors and your AI agent, together with any contact details a visitor chooses to provide.

Technical data: IP address, browser user-agent, and timestamps, recorded for security, rate limiting, and audit logging.

To operate the service: answering questions from your documents, capturing leads, showing your analytics, and enforcing your plan limits.

To keep the service secure: detecting abuse, rate limiting, and maintaining an audit trail of administrative actions.

To contact you about your account — verification, password resets, invoices, and service notices.

We do not sell your data, and we do not use your uploaded content to train any model.

AI providers: when configured to use an external model provider, the text of a customer question and the relevant excerpts retrieved from your documents are sent to that provider to generate an answer.

Payment providers: plan purchases are handled by the configured payment gateway. We never see or store your full card details.

Email delivery: transactional email (verification, password reset, invitations) is sent through the configured mail provider.

Every record in the system carries an organization identifier, and every query is filtered by it at the database level rather than in application code after the fact.

One organization's documents, conversations, leads, and analytics are never reachable from another organization's account or API key.

Your data is retained for as long as your account is active. You can delete documents, conversations, and leads at any time from the dashboard.

You may request a copy of your data or the deletion of your account by contacting us. Deleting an organization removes its documents, conversations, and leads.

Audit logs may be retained for a limited period after deletion where we are required to keep them for security purposes.

For any privacy question or request, contact us at the address published on our website.