Privacy Policy

Last updated: 8 September 2026

This policy explains what personal data aichat (“we”) collects, why, and what rights you have. It covers two groups: our subscribers (the businesses that use aichat) and their end-contacts (the people who message a subscriber’s agent).

1. Data we collect

• Account data — name, email, password hash, plan, billing identifiers.
• Agent & channel data — agent configuration and the access tokens for channels you connect (encrypted at rest).
• Conversation data — messages exchanged between an agent and an end-contact, plus contact details the end-contact provides (name, phone, email).
• Technical data — for website-widget visitors: approximate location (from IP, not stored as the raw IP), browser, device and operating system.
• Usage logs — request metadata used to run, secure and debug the Service.

2. Why we use it

• to provide the Service — routing messages, generating AI replies, showing your inbox and analytics;
• to bill you and prevent fraud and abuse;
• to send service email (verification, password reset, booking and invoice confirmations, trial reminders);
• to comply with legal obligations.

3. AI processing

To generate replies, message content is sent to the AI provider configured for that agent (OpenAI, Anthropic, Google or Groq), or to a provider we operate on your behalf. These providers process the content to return a response and under their terms do not use API content to train their models.

4. Sharing

We share data only with:

• the messaging platforms you connect (Meta / WhatsApp, Telegram), to deliver messages;
• AI providers, as above;
• our payment provider, to process subscriptions;
• infrastructure providers that host the Service;
• authorities where required by law.

We never sell personal data.

5. Retention

Account and conversation data is kept while your account is active. When you delete your account, agents, contacts, conversations and messages are permanently deleted. Backups roll off within 35 days. Some billing records are kept longer where law requires.

6. Your rights

Subscribers can export all their data (Settings → Danger zone → Export) and delete their account and its data at any time. If you are an end-contact and want your data accessed or erased, contact the business you messaged; if you cannot reach them, contact us and we will act as processor to help.

7. Security

Passwords are hashed; channel tokens and API keys are encrypted at rest (AES-256-GCM); traffic is served over HTTPS. No system is perfectly secure, but we work to protect your data and will notify you of a breach that affects you as required by law.

8. Contact

Privacy questions or requests: support@skysbd.com.