Privacy Policy

• Account / billing data: when you sign up as a Client, WebsyChat is the controller of your account information.
• Visitor chat & leads on your sites: you are the controller; WebsyChat processes that data on your instructions to provide the Service.

From Clients: name, email, password or Google auth identifiers, organization details, billing and subscription status, team invites, support messages, and product usage telemetry.

From your website visitors (via embed): messages, session metadata, approximate location derived from IP (if enabled), page URL/referrer, device/user-agent, and lead form fields you choose to collect.

Automatically: cookies and similar technologies as described in our Cookie Policy; IP address; log data for security and reliability.

• Provide, secure, and improve the Service (including RAG/embeddings and abuse detection).
• Authenticate users, manage trials and subscriptions, and process payments via processors.
• Send transactional email (security, billing, product notices).
• Comply with law and enforce our Terms and Acceptable Use Policy.
• With consent or as otherwise allowed, limited product updates (you may opt out of non-essential marketing).

Depending on the processing: contract performance, legitimate interests (securing and improving the Service, preventing abuse), consent (where required for cookies/marketing), and legal obligation.

We share data with subprocessors needed to run the Service (hosting, database, Redis, email, payments, AI inference). We do not sell personal data. We may disclose information if required by law or to protect rights, safety, and security.

Data may be processed in the United States, Europe, or other regions where our providers operate. Where required, we use appropriate transfer mechanisms (such as Standard Contractual Clauses).

We retain account and billing records as needed for the subscription and legal obligations. Conversation and knowledge-base data is retained while your account is active and for a limited period after cancellation unless you delete it sooner or law requires longer retention. Security logs may be kept for abuse investigation.

We use industry-standard measures (encryption in transit, access controls, monitoring). No method of transmission or storage is 100% secure.

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object or withdraw consent. Clients may exercise rights via the dashboard or by emailing privacy@websychat.com. Visitors should contact the website owner (our Client) first for chat/lead data on that site; we will assist the Client as processor.

The Service is not directed to children under 16 (or higher age required locally). We do not knowingly collect their data.

We may update this Policy by posting a new version with an updated effective date. Material changes affecting Clients will be communicated reasonably in advance where required.

Privacy: privacy@websychat.com
General: support@websychat.com