/privacy · draft
Privacy policy (draft)
DRAFT — placeholder privacy policy, not reviewed by a lawyer and not yet in effect. It needs legal review before launch.
What the service stores today
- -Account: name, email address and a hashed password (via the authentication service); session cookies to keep you signed in.
- -API keys: only a hash and a short prefix of each key; the full key is shown once at creation.
- -Escalated sessions: the agent ID, the context your agent sends, the message transcript, and timing used for per-minute billing and invoices.
- -Payments: handled by Stripe; this site stores Stripe customer and payment references, not card numbers.
- -Sales chat and POST /api/leads: what you type, plus the lead details you provide (name, company, email, use case, volume, timeline), a hashed IP address and your browser user agent — used for rate limiting and sales follow-up.
- -Sales chat replies may be generated by a third-party AI model provider when one is configured; your messages are sent to it to produce the reply.
To be completed by counsel
- -Legal entity and contact for privacy requests
- -Legal bases and purposes
- -Retention periods
- -Sub-processors list
- -Your rights (access, deletion, correction) and how to exercise them
- -International transfers
- -Changes to this policy