Last updated: [DATE] — this is a starting template, not legal advice. Have a lawyer review it before relying on it for GDPR, CCPA, or other jurisdiction-specific compliance.
Chatframe ("we," "us") is operated by [YOUR COMPANY LEGAL NAME], [YOUR BUSINESS ADDRESS]. This policy explains what we collect and why, for both people who create an account ("account holders") and people who chat with a Chatframe-powered widget on someone else's website ("visitors").
From account holders: your email address (for sign-in), the bot configurations and knowledge base content you create or upload (including any PDFs/documents), billing information (handled by Stripe — we don't store card numbers ourselves), and, if you connect it, a Google Calendar access token used to check availability and create events.
From website visitors chatting with a bot: the messages sent in the conversation, and — only if voluntarily shared in chat — an email, phone number, or preferred contact time, which is stored as a lead for the business that owns that bot. We also keep lightweight usage counts (which bot, which browser session, which month) to enforce plan limits; this is not used to identify visitors personally.
To operate the service: generating chatbot replies, capturing leads for the business that owns a bot, enforcing plan limits, processing payments, sending sign-in emails, and — where enabled — checking calendar availability and booking appointments.
Chat replies are generated using Anthropic's Claude API — conversation content is sent to Anthropic to produce a response. Payments are processed by Stripe. Sign-in emails are sent via Resend. If a business connects a calendar, availability checks and event creation go through Google's Calendar API. Each of these providers has its own privacy policy governing how they handle data passed to them.
We use a single session cookie to keep you signed in to the builder. It's not used for advertising or cross-site tracking.
Account data and bot configurations are kept while your account is active. Deleting a bot removes its configuration and captured leads. To delete your account entirely, contact us at [PRIVACY CONTACT EMAIL] and we'll remove your data, except where we're required to retain billing records for legal or tax purposes.
Chatframe is not directed at children under 13, and we don't knowingly collect personal information from them.
We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.
Questions about this policy or your data? Reach out here, or email [PRIVACY CONTACT EMAIL].