Privacy Policy

ChatPlus AI ("we", "us") provides an AI-powered customer engagement platform that lets businesses ("Customers") embed a chat widget on their websites, trained on their own content. This policy explains what data we collect, why, and the choices you have. It applies to our websites (chatplus-ai.com, app.chatplus-ai.com), our dashboard, and chat widgets powered by our platform.

Two kinds of users

• Customers: businesses that create a ChatPlus AI account and embed our widget on their site.
• End users: visitors who chat with a widget on a Customer's website. For end-user conversations, we process data on behalf of the Customer whose site you are visiting; that Customer is the controller of your conversation data.

Data we collect

• Account data (Customers): name, email address, password (stored as a hash by our authentication provider), profile picture, and team member details.
• Knowledge base content (Customers): documents you upload and pages from your website, which we process into search indexes to power your assistant's answers. When you install the widget on a site, we automatically read pages from that same domain so the assistant has something to answer from on day one. We only ever read the domain the widget is installed on, and you can review and remove anything indexed from your dashboard.
• Conversation data (end users): messages you send to a widget and, if you choose to share them, your name and email address so the business can follow up with you.
• Technical data: IP address (used for rate limiting and abuse prevention), browser type, and basic request logs.

Browser storage

The chat widget stores a single identifier in your browser's local storage so that if you navigate to another page or come back later, your conversation is still there rather than starting over. It is not an advertising or tracking cookie, it is not shared with anyone, and it is not used to follow you across other websites. Clearing your browser storage removes it and starts a fresh conversation.

How we use data

• To operate the service: answering end-user questions using the Customer's knowledge base, showing conversations in the Customer's dashboard, and sending escalation notifications.
• To send transactional email (team invitations, escalation alerts). We do not send marketing email to end users.
• To secure the service: rate limiting, abuse detection, and debugging.

We do not sell personal data, and we do not use your conversations or knowledge base content to train our own or third-party foundation AI models.

AI processing

Conversations are processed by large language model providers (currently Anthropic) and embedding providers (currently Voyage AI) to generate responses. These providers process the data as service providers under their API terms and do not use it to train their models.

Service providers

We rely on a small set of infrastructure providers to run ChatPlus AI:

• Vercel: application hosting
• Google Firebase: authentication and database
• Supabase: file storage and search indexes
• Anthropic: AI response generation
• Voyage AI: text embeddings for search
• Firecrawl: website crawling, for content Customers ask us to index
• Hostinger: transactional email delivery

Data retention & deletion

Account data is kept while your account is active. Conversation data is kept so Customers can review their chat history. To request deletion of your account or your personal data (including end users who want their conversation data removed), email support@chatplus-ai.com. We will act on verified requests within 30 days. End-user requests may be referred to the Customer whose site collected the data, since they control it.

For business Customers

Where you use ChatPlus AI to handle conversations with people in the UK or EEA, you are the controller of that conversation data and we act as your processor. Our lawful basis for handling Customer account data is the contract between us; for security and abuse prevention it is our legitimate interest in keeping the service running.

The providers listed above are our sub-processors, and some of them process data outside the UK and EEA. Where that happens, transfers are covered by the Standard Contractual Clauses (or the UK equivalent) in those providers' terms. If you need a signed data processing agreement before rolling ChatPlus AI out, or want to be notified when we add or change a sub-processor, email support@chatplus-ai.com and we will arrange it.

Security

Data is encrypted in transit (TLS) and at rest by our infrastructure providers. Each Customer's conversations, contacts, and knowledge base are scoped to their own account, and requests are checked against that scope before any data is returned. Access to production systems is limited to the people who operate ChatPlus AI.

ChatPlus AI is a young product and we are not going to pretend otherwise: we do not hold SOC 2, ISO 27001, or any comparable certification today. No method of transmission or storage is completely secure. If you find a security issue, please report it to support@chatplus-ai.com and we will respond.

Children

ChatPlus AI is not directed at children under 13, and we do not knowingly collect their personal data.

Changes

We may update this policy as the service evolves. Material changes will be reflected by the "Last updated" date above, and significant changes will be announced to account holders by email.

Contact

Questions or requests: support@chatplus-ai.com