Privacy Policy

01 Introduction

DVSCRIPT ("WebsiteChatbot," "we," "our," or "us") operates an AI chatbot platform for websites available at websitechatbot.io (the "Services").

This Privacy Policy explains how we collect, use, disclose, process, and protect personal information when you use the Services — as an account holder, or as a visitor chatting with a widget powered by WebsiteChatbot.

By accessing or using WebsiteChatbot, you agree to this Privacy Policy.

WebsiteChatbot complies with applicable privacy laws including:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Other applicable international data protection laws

02 Information we collect

A. Information you provide

When you create and use a WebsiteChatbot account, we may collect:

• Name and email address
• Password (stored as a secure hash) or Google Sign-In credentials
• Profile photo
• Your website URLs, uploaded files, and Q&A entries used to teach your chatbot
• Widget configuration (name, colors, welcome message, channel links)
• Booking settings — working hours, services, time zone
• Subscription selections and communications with support

B. Automatically collected information

When you use the Services, we may collect:

• IP address
• Browser type and device identifiers
• Operating system
• Usage data and interaction metrics
• Approximate location

C. Cookies and similar technologies

We use cookies and local storage to:

• Maintain login sessions
• Store user preferences (such as your theme choice)
• Enable Stripe and Google Sign-In functionality
• Keep a visitor's chat history in their own browser
• Attribute referral visits

We do not use cross-site behavioral advertising cookies. You may disable cookies in your browser settings, though certain features may not function properly.

03 Visitor & chatbot data

When visitors chat with a widget installed on a customer's website, we process on that customer's behalf:

• Chat messages and conversation history
• Contact details a visitor chooses to share (name, email, phone) — collected as leads
• Files and images a visitor attaches in the chat
• Voice input, transcribed to text in the visitor's browser
• Appointment details when a visitor books through the chatbot

Under GDPR, for this data:

• The website owner is the Data Controller
• WebsiteChatbot acts as a Data Processor providing infrastructure

We do not:

• Sell or rent visitor conversations or leads
• Use visitor data for advertising
• Use visitor conversations to train third-party AI models
• Contact a customer's visitors for our own purposes

Website owners are responsible for their own privacy notices and for how they use the leads and conversations collected by their chatbot.

04 Legal basis for processing (GDPR)

For users in the European Economic Area, we process personal data under:

• Contractual necessity
• Legitimate interests
• User consent
• Legal obligations

05 How we use personal information

We use personal information to:

• Provide and operate the Services
• Authenticate and secure accounts
• Generate AI chatbot replies from the knowledge you provide
• Deliver conversations, leads, and bookings to your dashboard
• Process subscriptions and billing
• Provide analytics about your chatbot's activity
• Improve product stability and performance
• Prevent fraud and abuse
• Comply with legal requirements

We may use anonymized and aggregated data for analytics and service improvement.

We do not sell personal information.

06 AI processing

Chatbot replies are generated by artificial intelligence. To produce a reply, the visitor's message and the relevant knowledge you provided are sent to our AI infrastructure providers for processing.

• We may temporarily store prompts and outputs for debugging, performance, and reliability.
• We do not use your data or your visitors' conversations to train third-party AI models.
• We may use anonymized, aggregated usage insights to improve internal systems.

WebsiteChatbot does not engage in automated decision-making that produces legal or similarly significant effects.

07 Data sharing and disclosure

We may share personal information with service providers that help us operate the platform:

• Stripe — payments and billing
• Google — sign-in authentication
• AI infrastructure providers — generating chatbot replies
• Hosting and infrastructure providers

Each service provider processes data under contractual data protection obligations.

We may also disclose information:

• When required by law
• In response to valid legal process
• In connection with a merger, acquisition, or asset transfer

We do not sell or rent personal data.

08 International data transfers

WebsiteChatbot operates globally. Personal information may be processed in the United States or other jurisdictions.

Where required, we rely on:

• Standard Contractual Clauses
• Adequacy decisions
• Appropriate safeguards

By using the Services, you consent to these transfers.

09 Data retention

We retain personal information:

• While your account remains active
• As necessary for compliance with legal obligations

Upon account deletion:

• Account data is deleted within 30 days
• Your chatbots stop replying immediately
• Conversations, leads, knowledge, and bookings are permanently erased

Deleting a single chatbot from your dashboard permanently removes its conversations, leads, knowledge, and bookings. Financial and billing records may be retained for statutory compliance.

10 Security measures

We implement comprehensive security measures including:

• HTTPS encrypted transmission
• Encrypted storage
• Hashed passwords — never stored in plain text
• Role-based access controls
• Restricted internal personnel access

While no system is entirely secure, we take reasonable steps to protect data.

11 Your rights

Depending on your jurisdiction, you may have the right to:

• Access personal data
• Correct inaccurate data
• Delete personal data
• Export personal data
• Restrict processing
• Object to processing

California residents may request disclosure of data categories collected.

If you are a visitor who chatted with a chatbot on a customer's website, please direct requests to that website owner first — they control that data. We assist owners in fulfilling such requests.

To exercise your rights, contact support@websitechatbot.io. We respond within applicable legal timeframes.

12 Children's privacy

WebsiteChatbot is not intended for individuals under 16.

We do not knowingly collect personal data from minors. If we become aware of such collection, we will delete the data promptly.

13 Data breach notification

In the event of a data breach:

• We will investigate promptly
• We will notify affected users where required by law

14 Subprocessors

We use trusted third-party service providers to operate our platform, including but not limited to:

• Stripe — payments
• Google — authentication
• AI infrastructure providers — reply generation
• Hosting and infrastructure providers

These providers are bound by contractual data protection obligations.

15 Changes to this policy

We may update this Privacy Policy from time to time.

If material changes occur, we will notify users via email or in-app notice.

Continued use of the Services after updates constitutes acceptance.

16 Contact