Privacy & Data Usage
Last updated: [DATE]
1. What we collect
When you sign up and use DIYChat, we collect:
- Account details - your business/chatbot name, contact email, website domain, and optionally phone number and company size.
- Chatbot configuration - the welcome message, system prompt, and knowledge base content you provide.
- Conversation data - messages exchanged between your customers and your chatbot (and with your agents, if handed off to a human), so you can review transcripts and we can generate the embeddings that power your chatbot's answers.
- Basic technical data - IP address and timestamps, for security and abuse prevention (e.g. login rate-limiting).
2. How your data is kept separate from other customers
Every account is isolated by a unique tenant identifier at the database level. Your knowledge base, conversations, settings, and team logins are only ever retrieved using that identifier - another customer's account can never query or see your data, and yours can never see theirs.
3. Third parties we share data with
| Who | What they receive | Why |
|---|---|---|
| OpenAI | Your knowledge base text (to generate embeddings) and the live conversation (to generate a response) | Powers your chatbot's answers |
| [Hosting provider] | All account and conversation data, at rest | Runs the servers and databases DIYChat operates on |
We don't sell your data or your customers' conversation data to anyone.
4. How long we keep it
[Describe your retention policy - e.g. conversation data is kept for X months, account data is deleted within Y days of account cancellation, unless required by law to retain it longer.]
5. Cookies
We use a single session cookie to keep you logged in to your dashboard. We don't use advertising or cross-site tracking cookies.
6. Your rights
You can request a copy of your account data, ask us to correct it, or request deletion of your account and its data at any time by contacting [SUPPORT EMAIL]. [Add any jurisdiction-specific rights language you're required to include, e.g. GDPR Articles 15-17 or CCPA equivalents.]
7. Your customers' data
If your website visitors chat with your chatbot, the messages they send are stored as part of your account's conversation data, under your control. You're responsible for telling your own customers how their conversation data is used, in line with your own privacy policy.
8. Contact
Questions about this policy or your data? Contact us at [SUPPORT EMAIL].