Privacy Policy
How Chatonics collects, uses, and protects personal data.
1. Who we are
This Privacy Policy explains how [Legal Entity] ("Chatonics", "we") handles personal data in connection with the Chatonics platform. Contact: [privacy contact email], [Registered Address].
2. The data we process
| Category | Examples |
|---|---|
| Account data | Name, email, role, workspace details |
| Usage data | Log data, device and browser info, feature usage |
| Customer conversation data | Messages, contacts, and attachments you process through the Service |
| Cookies and similar | Session and authentication data (see the Cookie Policy) |
For conversation data, your business is the controller and Chatonics acts as a processor on your behalf (see the Data Processing Agreement).
3. How we use data
- To provide, secure, and improve the Service.
- To enable features such as AI assistance, translation, and knowledge-base answers.
- To communicate with you about your account and support.
- To meet legal obligations.
4. Lawful bases
- Performance of a contract, legitimate interests, consent (where required), and legal obligation.
- [Confirm the applicable bases per jurisdiction with counsel.]
5. Sharing and subprocessors
- We share data with service providers (subprocessors) who help us run the Service - for example hosting, email delivery, and AI processing.
- Subprocessors are bound by appropriate data-protection terms.
- A current list of subprocessors is maintained and available at [subprocessor list URL] or on request.
- We do not sell personal data.
6. International transfers
Where data is transferred across borders, we use appropriate safeguards (for example, standard contractual clauses) as required by applicable law. [Confirm with counsel.]
7. Data retention
- We retain personal data for as long as needed to provide the Service and meet legal obligations.
- On account closure, data is deleted or returned as described in the DPA, subject to legal retention requirements. See also our Data Retention Policy.
8. Security
- We apply technical and organizational measures including encryption of sensitive credentials, access controls, and tenant isolation.
- See the Security Whitepaper for more detail.
9. Your rights
- Depending on your location, you may have rights to access, correct, delete, or port your data, and to object to or restrict processing.
- To exercise rights, contact [privacy contact email].
- End customers should contact the business they interacted with (the controller) first.
10. Children
The Service is not directed to children, and we do not knowingly collect data from children. [Confirm age threshold per jurisdiction.]
11. Changes
We may update this Policy and will post the updated version with a new effective date.