Privacy Policy

This Privacy Policy explains how Chap-AI (“Chap-AI”, “we”, “us”, or “our”) handles personal data when people visit chap-ai.com, create or use an account, communicate with us, or interact with a business that uses Chap-AI.

1. Our roles

For account, website, security, billing, and support data, Chap-AI generally decides why and how the data is used. For customer conversations and contact information a business uploads or receives through its workspace, that business generally controls the data and Chap-AI processes it to provide the service. End customers should first direct requests about a conversation to the business they contacted.

2. Data we collect

• Account data: name, email address, login identifiers, verification status, workspace membership, and security records.
• Workspace data: business settings, connected-channel configuration, knowledge-base content, team permissions, and support preferences.
• Conversation data: customer identifiers, message content, attachments or links, channel metadata, AI drafts or replies, and human-agent activity.
• Usage and technical data: IP address, browser or device information, timestamps, feature activity, diagnostics, security events, and service logs.
• Commercial data: plan, usage limits, subscription status, transaction references, and tax or billing metadata supplied by our payment provider. Chap-AI does not receive complete payment-card details from secure checkout.
• Communications: enquiries, support requests, feedback, and other messages sent to us.

3. How we use data

We use personal data to provide and administer the service; authenticate users; deliver connected-channel messages; generate AI-assisted output; manage plans and payments; respond to enquiries; prevent fraud and abuse; diagnose problems; improve reliability and usability; enforce our Terms; and meet legal obligations.

4. Legal bases

Depending on the person and jurisdiction, we process data to perform a contract, take requested pre-contract steps, pursue legitimate interests such as service security and improvement, comply with law, or act on consent. A customer business is responsible for the legal basis covering the end-customer data it sends to Chap-AI.

5. Service providers and sharing

We share only what is reasonably necessary with providers that help run Chap-AI, such as hosting, database, vector-search, realtime, email, monitoring, AI, authentication, channel, and payment services. Relevant providers may include Google, Meta/WhatsApp, Telegram, payment processors, and AI model providers selected for the service. We may also disclose data when required by law, to protect rights or safety, during a business reorganization, or with your direction. We do not sell personal data.

6. International processing

Chap-AI and its providers may process data in countries different from where a user or customer is located. Where required, we use contractual or other lawful safeguards for international transfers.

7. Retention

We keep account and workspace data while an account is active and for a reasonable period afterward when needed for support, security, dispute resolution, backups, or legal compliance. Conversation retention is also limited by the selected plan and workspace controls. We delete or de-identify data when it is no longer reasonably needed, subject to secure backup cycles and legal holds.

8. Security

We use administrative, technical, and organizational safeguards designed to protect data, including access controls, encrypted network transport, restricted production access, logging, and backups. No online service can guarantee absolute security. Workspace owners should use strong credentials, limit team access, and promptly report suspected compromise.

9. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection, or withdraw consent. Account users can update some information in the service. To make another request, use the contact form. We may need to verify identity and authority. You may also complain to the data-protection authority in your jurisdiction.

10. Cookies

Chap-AI uses essential session and security cookies needed for login, request protection, and service operation. We do not currently use third-party advertising cookies on the public website. If that changes, we will update this notice and provide any consent controls required by law.

11. Children

Chap-AI is a business service and is not directed to children. Account holders must be at least 18. Contact us if you believe a child has provided personal data directly to Chap-AI.

12. Changes and contact

We may update this policy to reflect service, provider, or legal changes. The date above shows the latest revision. Privacy questions and requests can be sent through our public contact form.