Privacy notice

01 Who we are

Chatevo provides an AI agent that businesses embed on their websites. This notice covers the personal data we handle, both for people who visit this website and for people who talk to an assistant run by one of our customers.

Those are two different roles. On this website we are the data controller. When a customer runs an assistant, they are the controller of their end-users' conversations and we are their processor, acting on their instructions under the data processing agreement.

02 What we collect on this website

We keep this deliberately small. There are no advertising trackers and no cross-site profiling.

• Anything you type into a form: your name, work email, company, the systems you run, and your message. We use it to reply to you and to decide what to build next.
• Privacy-friendly analytics covering page views and referrers in aggregate, without cookies that follow you between sites.
• Server logs, including IP address, needed to operate and secure the site.

03 Conversations with an assistant

If you spoke to an assistant on somebody else's website, that business decides what is collected and how long it is kept. We store and process it for them.

A conversation contains the messages exchanged and a record of any lookups the assistant performed against that business's systems. If you typed personal details into a message, those are in the conversation.

To exercise your rights over that conversation, contact the business whose website you were using. If you contact us instead, we will pass the request to them and help them fulfil it.

04 We do not train models on your data

Documents our customers upload and conversations their end-users have are not used to train public models. This is not a setting you have to find and switch off.

We use third-party model providers to generate answers. Content is sent to them to produce a response and is not retained by us for training.

05 Who else is involved

We use a small number of suppliers to run the service. Each is bound by contract to process data only on our instructions.

• Cloud hosting and database providers, to run the application.
• Object storage, for documents our customers upload.
• A vector database, to index document text so it can be searched by meaning.
• Model providers, to generate answers and embeddings.
• An email provider, to deliver transactional email and to send us your form submissions.
• A payment provider, to handle billing. We do not store card numbers.

06 How long we keep things

Form submissions to this website are kept while we are still in conversation with you, and deleted when they are no longer needed.

Customer content is kept while the account is active. Deleting a document removes it from the search index. Closing an account removes its content.

Logs are kept for a limited period for security and debugging, then discarded.

07 Your rights

Depending on where you live you may have the right to access a copy of your data, correct it, delete it, restrict or object to processing, and ask for it in a portable format. You can also complain to your local data protection authority.

Ask us and we will act on it. We will not make you prove you are serious first.

08 International transfers

Some of our suppliers operate outside your country. Where personal data moves across borders we rely on the appropriate safeguards for that transfer, such as standard contractual clauses.

09 Changes to this notice

If we change how we handle personal data in a way that affects you, we will update the date on this page and, where the change is significant, tell customers directly rather than relying on you noticing.