Privacy Policy

1.1 Information You Provide

• •Account information: your name and email address. Sign-in and password management are handled by our identity provider, so we never store your password.
• •Payment information: processed by our payment provider, which acts as Merchant of Record. ChatterEase never sees or stores your card details, and stores only a provider customer reference and subscription status against your account.
• •Business content: documents you upload, and website content we scrape from a site you point us at, in order to train your AI agents
• •AI agent configuration: the names, instructions, welcome messages and tone you configure
• •Conversations: the questions visitors send to your AI agent and the answers it gives, together with the leads visitors choose to submit
• •Lead information: where you enable lead capture, the name, email address and message a visitor provides
• •Communications: messages you send to our support team

1.2 Information Collected Automatically

• •Usage data: pages visited, features used and actions taken in the dashboard
• •Device information: browser type, operating system and screen resolution
• •IP address, which our hosting and database providers use to deliver the service and which we store in server logs
• •Cookies and similar storage technologies (see Cookie Policy for the exact names)

1.3 Information from Third Parties

• •Authentication data from our identity provider
• •Subscription and payment status from our payment provider

We use your data to:

• •Provide, operate, and improve ChatterEase
• •Process payments and manage subscriptions
• •Send transactional emails (receipts, password resets, plan changes)
• •Respond to support requests
• •Analyze usage patterns to improve features
• •Comply with legal obligations
• •Detect and prevent fraud or abuse

We do NOT:

• •Sell your personal data to third parties
• •Use your training content, documents or conversations to train models that we then offer to other customers
• •Share your data with advertisers
• •Use your AI agent content for advertising

We do not routinely read your AI agent conversations. Our team can access your data where it is necessary to answer a support request, to diagnose a fault you have reported, to comply with a legal obligation, or to protect the security of the service. We will tell you if we have done so.

3.1 What We Do

• •The site is served only over HTTPS, and we send an HSTS header telling browsers to refuse unencrypted connections to chatterease.com.
• •We send standard browser security headers, including X-Content-Type-Options, X-Frame-Options, Referrer-Policy and Permissions-Policy.
• •Application data is held in a managed PostgreSQL database with row-level security, so a query is scoped to your organisation rather than trusting the application's filtering alone.
• •The key that bypasses those row-level checks is a server-side secret. It is never sent to the browser, and database access from the browser uses a publishable key only.
• •Payment details never reach our servers at all; they are entered on our payment provider's hosted checkout.
• •Access to production data is limited to those who need it to operate the service.

3.2 What We Do Not Claim

3.3 Encryption

Data is encrypted in transit using TLS, negotiated with your browser, and is encrypted at rest by our hosting and database providers as part of their standard service. We do not apply our own application-layer encryption to your content, so please do not send us anything you would not be comfortable with our infrastructure providers holding in plain order to operate the service.

3.4 Breaches

If a security incident affects your personal data, we will contain it, investigate it, and notify you and the relevant supervisory authority without undue delay. We cannot commit in advance to a fixed notification window, because the time needed to establish what happened depends on the incident.

We keep your data for as long as your account is active, and delete it when you ask us to or when we no longer have a reason to keep it. Specifically:

• •Account and workspace data: kept while your account is active. To have it deleted, email privacy@chatterease.com and we will action the request, though we may keep a minimal record that an account existed and was closed.
• •AI agent training content and conversations: kept while the AI agent exists. Deleting an AI agent deletes its documents, extracted text, conversations and messages straight away, because those records belong to that AI agent.
• •Webhook delivery logs: automatically trimmed every night, keeping the most recent 100 deliveries per webhook and never keeping a log older than 30 days.
• •Support correspondence: kept while we are helping you and afterwards for as long as needed to have a record of what was agreed.
• •Payment records: we do not hold your card details. The subscription records our payment provider keeps for accounting and tax purposes are governed by that provider's own retention rules and statutory requirements.
• •Server logs: retained by our hosting provider for a short operational period, which is set by them rather than by us.

We have not built self-service account deletion, so deletion is handled by email. Ask us and we will do it and confirm when it is done.

Depending on where you are, privacy law gives you a range of rights over your personal data. Where they apply to you, you can ask us to:

• •Access: request a copy of the data we hold about you
• •Correction: fix data that is inaccurate or incomplete
• •Deletion: ask us to delete your account and the data associated with it
• •Portability: receive your data in a machine-readable format
• •Object: object to us processing your data
• •Restrict: ask us to limit how we use your data

To exercise any of these, email privacy@chatterease.com. We will acknowledge your request and aim to respond within 30 days. We do not charge for this, and we will not ask you to contact us through a different channel.

We do not make decisions about you using automated profiling that produces legal or similarly significant effects.

ChatterEase answers questions using a third-party AI model provider. To make that work, the following is sent to that provider:

• •When you add a document or point us at a website, its text is sent to the AI provider to be split into chunks and turned into numerical embeddings, which are stored in your workspace so your AI agent can search it.
• •When a visitor asks your AI agent a question, the question, the answer your AI agent has drafted, and the relevant excerpts retrieved from your own content are sent to the AI provider to generate a reply.
• •Your account email address is sent to the AI provider as an identifier on those requests.

That means the AI provider processes your content on our behalf. It does so under its own API terms and data-processing commitments, and we instruct it not to use your content to train its own models. Your content is not used to train a model that we offer to anyone else.

We use the following providers to run ChatterEase. Each receives only what it needs to do its part:

We do not share your data with advertisers or data brokers. If we ever add a provider that handles your content, we will update this list.

See our Cookie Policy for the exact cookies and local storage we use, and how to control them.

ChatterEase is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us data, contact us immediately at privacy@chatterease.com.

We may update this policy periodically. We will notify you by email and update the "Last updated" date. Continued use after changes means you accept the updated policy.

Privacy questions and data requests: privacy@chatterease.com

ChatterEase, chatterease.com. Anything about billing rather than data goes to support@chatterease.com.