We believe privacy is a right, not a feature. Here's exactly what we collect, why we collect it, and how we protect it — in plain English.
When you register, we collect your name, business name, email address, phone number, and password (hashed, never stored in plain text).
Service descriptions, FAQs, operating hours, and any documents you upload to train your AI assistant. This data belongs entirely to you.
AI-customer conversations processed through your assistant. These are stored securely and used only to improve your AI's responses — never shared.
Anonymous, aggregated usage patterns (page views, feature usage) to help us improve the product. No personally identifiable data is included.
Your uploaded knowledge base is used exclusively to train and operate your AI assistant. We do not use your business data to train any shared or public models.
We use your contact details to send appointment confirmations, lead alerts, and product updates you've opted into.
Usage patterns help us detect unusual activity and protect your account from unauthorized access.
We do not sell, rent, or trade your personal data or business information to any third party. Full stop.
All data moving between your browser and our servers is encrypted via TLS 1.3. Your connection is always secured.
All stored data — including uploaded documents and conversation logs — is encrypted with AES-256.
Our engineering team operates on a need-to-know basis. Strict role-based access controls limit who can touch production data.
We undergo annual independent audits against the SOC 2 Type II standard for security, availability, and confidentiality.
You can request a full export of your data at any time from your dashboard under Settings → Security.
Update any inaccurate personal or business information directly through your account settings.
Request full account deletion at any time. We will permanently delete all your data within 30 days, with a written confirmation.
We comply with GDPR (EU) and CCPA (California). Users in these regions have additional rights including data portability and opt-out of sale (though we never sell data).
Our privacy team responds within 24 hours.