Privacy Policy

This Privacy Policy explains how Chatterbox (“Chatterbox”, “we”, “us”), a product operated by Cybersapien Technologies, handles information when you use our website, admin dashboard, and the embeddable chat widget (together, the “Service”). Chatterbox is an AI chat widget for small businesses: it answers a business’s site visitors from that business’s own content and helps capture leads.

Controller vs. processor.For data about our own account holders (the businesses and agencies who sign up), Chatterbox is the data controller. For data that flows through a customer’s widget about theirwebsite visitors (chat messages and captured leads), the customer is the data controller and Chatterbox acts as a data processor, handling that data on the customer’s behalf and on their instructions.

1. Information we collect

Account & tenant data

When you create an account we collect your name, email address, and authentication identifiers from your Google sign-in, along with the business/tenant details you configure (business name, website URL, plan, and settings). We also collect billing-related metadata for paid plans.

Visitor chat & captured leads

When a visitor interacts with a customer’s widget, we process the messages they send and the answers generated, plus, where the visitor chooses to share them, contact details such as name, phone number, and email address captured as a lead. This data belongs to the customer (the tenant) whose site the widget is on.

Content the customer connects

To answer questions accurately, we crawl and index the pages and content a customer points us to, so the AI can ground its answers in that content rather than the open internet.

Cookies, local storage & technical data

The widget uses cookies and browser local storage to keep a chat conversation continuous across page loads and to remember basic preferences. The dashboard uses strictly necessary cookies (including httpOnly authentication cookies) to keep you signed in. We also log standard technical data such as IP address, browser type, and timestamps for security and reliability.

2. How we use information

• To provide, operate, and secure the Service.
• To generate predictable AI answers and to capture and deliver leads to the relevant customer.
• To maintain accounts, process plan changes, and provide support.
• To monitor performance, prevent abuse and fraud, and improve reliability.
• To comply with legal obligations.

3. Legal basis for processing

Where applicable law requires a legal basis, we rely on: performance of a contract (to provide the Service you sign up for); our legitimate interests (to secure, maintain, and improve the Service) balanced against your rights; consent (for example, where a visitor chooses to submit their contact details, or where required for certain cookies); and compliance with legal obligations.

4. Sharing & sub-processors

We do not sell personal data. We share data only with service providers (“sub-processors”) who help us run the Service, under contracts that require them to protect it. These include:

• AI / LLM providers.We send them messages to generate answers from a customer’s content.
• Hosting, database, and CDN providers. They run and deliver the Service.
• Payment and email/notification providers. They process payments and send transactional messages.

We may also disclose information if required by law, to protect our rights, or in connection with a merger or acquisition.

5. Data retention

We keep account and tenant data for as long as an account is active and as needed to provide the Service. Chat transcripts and captured leads are retained for the customer while their account is active and deleted or anonymised within a reasonable period after account closure or on the customer’s instruction, unless a longer period is required by law.

6. Security

We use industry-standard measures to protect data, including encryption in transit, access controls, and httpOnly authentication cookies. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. Account holders can manage much of their data directly in the dashboard. Website visitors should direct requests about their chat or lead data to the business whose site they used (the data controller); we will support that business in fulfilling the request.

8. Children

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

9. International transfers

We operate primarily in India and may process data on servers or with sub-processors located in other countries. Where data is transferred across borders, we take steps to ensure it remains protected consistent with this policy and applicable law.

10. Changes to this policy

We may update this policy from time to time. When we do, we’ll revise the “Last updated” date above and, for material changes, provide additional notice where appropriate.

11. Contact

Questions about this policy or your data? Email [email protected].

See also our Terms of Service and Refund & Cancellation Policy.