Privacy Policy

01Introduction

EasyChatWidget ("EasyChatWidget", "we", "us", or "our") provides an AI-powered chat widget that website owners embed on their sites to answer visitor questions. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to our website, dashboard, and the chat widget we host on our customers’ sites.

We act in two roles. For account holders (our customers), we are the data controller of your account information. For end-visitors who chat through a widget on a customer’s website, we generally act as a data processor on behalf of that customer, who is the controller of the conversation data.

02Information we collect

Account information

When you create an account we collect your name, email address, and a hashed password. If you subscribe to a paid plan, our payment provider collects your billing details - we never store full card numbers on our servers.

Content you provide

To train your AI, we crawl and store text from the website URL and documents you connect, along with your widget configuration (greeting, colors, position, and settings).

Conversation data

When a visitor chats with a widget, we process the messages exchanged, timestamps, and any details the visitor chooses to share (such as an email address for human follow-up). Widget owners can view these conversations in their dashboard.

Usage and technical data

We automatically collect log data such as IP address, browser type, pages visited, and device information to operate, secure, and improve the service.

03How we use information

• Provide, maintain, and improve the chat widget and dashboard.
• Generate AI responses grounded in the knowledge base you connect.
• Process payments, manage subscriptions, and send billing notices.
• Send transactional emails and, where permitted, product updates.
• Detect, prevent, and address fraud, abuse, and security issues.
• Comply with legal obligations and enforce our terms.

04AI processing & subprocessors

We rely on trusted third-party providers to deliver the service. These may include AI model providers (to generate responses), cloud hosting, email delivery, and payment processing. We share only the data necessary for each provider to perform its function, and we require them to protect it.

Conversation content sent to AI model providers is used to generate a reply in real time. We do not sell your data or use end-visitor conversations to train third-party foundation models for their own purposes.

05Cookies & tracking

Our dashboard uses essential cookies and local storage to keep you signed in and remember preferences. The embedded chat widget uses local storage to maintain conversation state within a session. We use limited analytics to understand product usage. You can control cookies through your browser settings, though disabling essential cookies may break parts of the service.

06Data retention

We keep account and conversation data for as long as your account is active or as needed to provide the service. You can delete widgets, conversations, and knowledge-base content at any time from the dashboard. When you close your account, we delete or anonymize personal data within a reasonable period, except where we must retain it to meet legal, accounting, or security obligations.

07Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. End-visitors should direct requests to the website owner operating the widget; we will assist that owner in responding.

08Security

We use encryption in transit, hashed passwords, access controls, and regular monitoring to protect your data. No method of transmission or storage is completely secure, but we work hard to safeguard your information and to notify affected users of any breach as required by law.

09International transfers

We may process and store data in countries other than your own. Where required, we use appropriate safeguards - such as standard contractual clauses - to protect data transferred across borders.

10Websites we do not support

We do not accept every website. Because our AI reads and stores the content of the site you connect, we do not onboard sites whose content we are not willing to process, host, or answer questions about. You may not connect a widget to a website that is:

• Adult or pornographic, or otherwise sexually explicit.
• Gambling related, including casinos, betting, and sports books.
• Selling or promoting drugs, alcohol, tobacco, vaping, or related products.
• Harmful to minors, including content that targets, exploits, or endangers children.

We screen the website address you submit against a list of known domains in these categories, and we refuse to scan or store content from a site that matches. The list is not perfect. If your site was refused and you believe that is a mistake, contact us and we will review it.

This is a summary of what we will process. The full rules, including what happens to an account that breaks them, live in our Terms of Service under Acceptable use.

11Children’s privacy

The service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

12Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you. Your continued use of the service after changes take effect constitutes acceptance.