Draft · not published
Privacy policy
How AI Assistant processes the personal data of the platform's customers and of their sites' visitors.
The document text is being prepared by a lawyerBelow is the structure only. Everything in square brackets must be filled in before publication. While this is a draft, the page is hidden from search engines.
Who processes the data
- [Operator / data controller: legal entity, address, registration number]
- [Contact for personal-data matters: email and, if required, the responsible person]
Roles of the parties
- [When the platform acts as a controller (customer accounts) and when as a processor on the customer's behalf (visitors' conversations)]
- [Link to the data processing agreement (DPA) with customers]
What data is processed
- [Customer account data]
- [Visitors' conversations with the assistant]
- [Contacts a visitor leaves for the manager]
- [Technical and security logs]
Purposes and legal bases
- [Purpose and legal basis for each category of data]
Recipients and subprocessors
- [Categories of subprocessors: hosting, language-model providers, email service, backup storage — and what data each receives]
- [How customers are notified about subprocessor changes]
International data transfers
- [Countries data is transferred to and the safeguards applied]
Retention periods
- [Retention period per category of data and the deletion or anonymisation procedure]
Data protection
- [Description of safeguards; a statement that the measures follow ISO/IEC 27001 requirements — without certification claims]
Data subject rights
- [List of rights, how to submit a request, response times]
- [Right to complain to a supervisory authority: its name and contacts]
Cookies
- [List of cookies: the dashboard session cookie; whether analytics or advertising cookies exist — to be confirmed]
Changes to this policy
- [How and when users learn about changes]
Contacts
- [email for personal-data requests]
- [postal address]