Privacy Policy chatlabz
1. Introduction
Before utilizing our Service, including the Website, Widget, and API, please familiarize yourself with this Privacy Policy (“Privacy Policy”). By accessing and using the Service, you consent to our Terms of Service and the Privacy Policy detailed here. Chatlabz (“Company”) manages the Service. We utilize your data to enhance and offer the Service. By employing the Service, you consent to the gathering and use of information in line with this policy.
2. Definitions
API: The Chatlabz application programming interface integrated with User’s software.
Cookies: Tiny files stored on your device.
Device: Any computer or mobile device.
Data Controller: An entity determining the purposes and means of processing personal data. We act as the Data Controller for your data.
Data Processors: Entities processing data on behalf of the Data Controller, such as our service providers.
Data Subject: An individual whose personal data is processed.
Personal Data: Information about an identifiable individual.
Service: The Website, Widget, and/or API.
Usage Data: Data automatically collected from using the Service.
User: The individual using the Service, corresponding to the Data Subject.
Website: The web pages located at chatlabz.com.
Widget: The Chatlabz widget added to a User’s website.
3. Data Controller
Your Personal Data is controlled by: chatlabz.
4. Information Collection and Use
We gather various types of information for different purposes to enhance and offer our Service.
5. Types of Data Collected
Personal Data: We may request personally identifiable information such as:
- Email address,
- First name and last name,
- Cookies and Usage Data.
Usage Data: We collect data such as your IP address, browser type, pages visited, and time spent on the Service.
Tracking Cookies Data
Tracking Cookies Data: We employ cookies to track activity on our Service. You may refuse cookies via your browser settings, but some parts of the Service may become inaccessible.
6. Use of Data
chatlabz uses the collected data for:
- Providing and maintaining the Service,
- Notifying you about changes to our Service,
- Allowing interactive features of our Service,
- Providing customer support,
- Gathering analysis to improve our Service,
- Monitoring Service usage,
- Detecting and addressing technical issues.
7. Retention of Data
We retain your data only as long as necessary for the purposes outlined or as required by law.
8. Transfer of Data
Your data may be transferred and maintained outside your jurisdiction. This includes processing data in the United States and on AWS servers in Stockholm, Sweden. We ensure compliance with GDPR and appropriate safeguards for cross-border transfers.
9. Data Processors
We use third-party service providers (data processors) to support our services:
- Amazon Web Services (AWS): For cloud hosting and data storage.
- OpenAI: For natural language processing services.
- Payment Processors: Such as Stripe for secure payment processing.
10. Disclosure of Data
We may disclose your data under specific conditions:
- To comply with legal obligations
- In response to lawful government or public authority requests (e.g., subpoenas or national security requirements)
- During business transfers (e.g., mergers)
11. Security of Data
We implement robust security measures to protect your data, though no method is 100% secure. We use encryption for data storage and transfers.
12. Your Data Protection Rights (GDPR)
If you reside in the EU/EEA, you have rights under the GDPR, including:
- Access: You can request copies of your personal data.
- Rectification: You can ask us to correct inaccurate data.
- Erasure: You can request deletion of your data (right to be forgotten).
- Restriction: You can request we limit the processing of your data.
- Portability: You can request to receive your data in a structured, commonly used format.
- Objection: You can object to the processing of your personal data.
13. Your Data Protection Rights under CalOPPA
As required by CalOPPA, our policy is publicly available, and we honor Do Not Track (DNT) signals where applicable.
14. Service Providers
We may use third-party service providers for purposes such as:
- Analytics (e.g., Google Analytics, Mixpanel)
- Payment processing (e.g., Stripe)
15. Children's Privacy
Our Service is not intended for children under 16. We do not knowingly collect data from individuals under 16.
16. Links to Other Sites
Our Service may contain links to third-party sites. We are not responsible for the content or privacy practices of such sites.
17. Data Breach Notification
In the event of a data breach, we will notify the relevant authorities within 72 hours and inform affected users without undue delay.
18. Changes to This Privacy Policy
We may update this Privacy Policy as necessary. Any changes will be posted on this page, and significant changes will be communicated to you via email.
19. Contact Us
For queries about this Privacy Policy, please contact us at support@chatlabz.com.
20. Privacy Policy Addendum
This section includes addendums for specific countries, including Canada, Mexico, Japan, and the Republic of Korea, detailing how we comply with local privacy regulations in those regions.
Key Additions:
- Data Processors: Included AWS and OpenAI as key data processors.
- Government Requests: Clearly outlined how Chatlabz will respond to lawful government requests for data.
- Data Breach Notification: Added a GDPR-compliant 72-hour breach notification clause.
- Cross-border Data Transfers: Compliance with GDPR for data transfers between the US and Sweden.