Privacy Policy

Last updated: November 02, 2026

1. Data Controller

The data controller for this Service is:

  • Company Name: ChatWith
  • Registered Address: [Company Registration Address]
  • Privacy Contact Email: privacy@aicustomerservice.tech
  • Data Protection Officer: Not applicable at this time

2. Information We Collect

2.1 Information You Provide Directly

  • Account Information: Email, name, password (encrypted storage)
  • Payment Information: Transaction amount, payment status. We do not store complete card numbers — card data is processed by the payment processor (see Section 5).
  • Communication Records: Emails, support tickets, feedback you send to customer support
  • Knowledge Sources: Content you upload for chatbot training (website URLs, PDFs, documents). This content is processed to train your chatbot and is stored securely.
  • Chatbot Configurations: Settings, customizations, and conversation logs

2.2 Information We Collect Automatically

  • Device and Network: IP address, device model, operating system, browser type, timezone
  • Usage Behavior: Page visits, feature usage, operation logs, session duration
  • Log Data: Request timestamps, error logs, performance data

3. How We Use Your Information

Purpose Legal Basis
Provide and maintain ServiceContract performance
Billing and payment processingContract performance
Customer supportContract performance / Legitimate interest
Chatbot training (knowledge sources)Contract performance
Service notifications (billing, security, policy updates)Legitimate interest
Security and fraud preventionLegitimate interest
Product optimization and analyticsLegitimate interest
Legal complianceLegal obligation

We may aggregate or anonymize data for statistical analysis. Such data cannot be identified to a specific individual.

4. Cookies and Tracking Technologies

Type Purpose Can be disabled
Strictly necessaryMaintain login, core functionalityNo
FunctionalLanguage preferences, personalized settingsYes
AnalyticsAnonymous usage statistics, product optimizationYes
MarketingTargeted advertising and performance measurementYes

Analytics tools used: Google Analytics (with privacy policy at https://policies.google.com/privacy). You can adjust preferences through browser settings or our Cookie Management Center.

5. Sharing and Disclosure of Personal Information

We do not sell your personal information, including "sale" as defined by applicable laws such as CCPA. We only share information in the following circumstances:

  • Service Providers: Cloud computing, payment, customer support, analytics providers bound by confidentiality agreements. Payment card data is processed exclusively by our PCI-DSS compliant payment processor Waffo Pancake and is not stored on our servers.
  • Business Partners: [If applicable, describe types of partnership and data scope]
  • Legal and Regulatory Requirements: As required by law, court orders, or legitimate requests from authorities
  • Business Transactions: In cases of merger or acquisition, with advance notice and protection obligations continued
  • With Your Consent: For other purposes with your explicit prior consent

6. Data Security Measures

  • Transmission Encryption: TLS / HTTPS
  • Storage Security: Sensitive data such as passwords is encrypted or hashed
  • Access Control: Principle of least privilege; employees sign confidentiality agreements
  • Regular Security Audits and Vulnerability Scans

If a security incident affecting your rights occurs, we will notify you and relevant regulatory authorities within 72 hours of discovery. Please keep your account credentials secure and do not share them with others.

7. Data Retention Period

Data Type Retention Period Disposal upon Expiry
Account InformationDuring active period; 90 days after account deletionDelete or anonymize
Transaction RecordsAs required by law, typically 7 yearsDelete or archive
Customer Support Records2 yearsSecure deletion
Security Audit Logs12 monthsSecure deletion
Knowledge Sources (Chatbot Training)Until you delete them or delete your accountSecure deletion upon your request or account deletion
Conversation LogsUntil you delete them or delete your accountSecure deletion upon your request or account deletion

8. Your Data Rights

To exercise the following rights, please contact us. We will process requests within 30 calendar days.

Right Description
Right to be informedUnderstand what data we collect and use
Right of accessObtain a copy of your personal data
Right to rectificationCorrect inaccurate or incomplete information
Right to erasureRequest data deletion under specific conditions
Right to restrict processingPause data processing under specific circumstances
Right to data portabilityObtain your data in machine-readable format
Right to objectObject to processing based on legitimate interests or marketing
Right to withdraw consentWithdraw consent for consent-based processing

If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.

9. Marketing Communications and Opt-Out

With your consent, we may send marketing information related to our services via email, SMS, or in-app notifications. You may unsubscribe at any time by clicking the "unsubscribe" link in emails, disabling marketing notifications in account settings, or contacting us. Opting out does not affect service-necessary notifications (such as billing, security reminders).

10. International Data Transfers

Our servers and partners may be located in [regions such as Singapore, United States]. For cross-border transfers, we ensure data security through:

  • Signing data processing agreements incorporating EU Standard Contractual Clauses (SCC)
  • Only transferring to recipients with equivalent protection levels
  • [Other safeguards such as adequacy decisions, BCR, etc.]

11. Children's Privacy

This Service is intended for users who are at least 18 years old. We do not knowingly collect information from minors under this age. If you believe your child has provided us with information, please contact us immediately and we will delete it as soon as possible.

12. Third-Party Links and Services

This Service may contain links to third-party sites or integrate with third-party services. This Policy only applies to information we collect directly. We are not responsible for third parties' data practices and recommend reviewing their policies before use.

13. Policy Changes

If material changes occur, we will notify you at least 15 days in advance via platform announcements or your registered email, and update the "Last Updated" date at the top of this page. Continued use after the effective date constitutes acceptance.

14. Contact Us