Privacy policy

Who we are

Chati is a trading name of PS Website Design Ltd, a company registered in England and Wales (company number 07041239). Our registered office is No. 1 Aire Street, Leeds, LS1 4PR.

This policy explains how we handle personal data when you visit chatibot.ai, contact us, book a demo or use Chati as a customer. For that data we are the controller under UK data protection law (the UK GDPR and the Data Protection Act 2018).

What we collect

• Account details: your name, business name, work email, password (stored only as a secure hash) and your Chati address.
• Team details: the names, email addresses and roles of people you invite to your workspace.
• Billing details: your plan, billing history and invoices. Card details are collected and held by Stripe, not by us. We only see the card type, the last four digits and the expiry date.
• What you tell us: messages, demo bookings and support requests, including any calls or emails.
• Usage and technical data: log-in times, the features you use, your IP address, browser and device, and security logs.
• Partner details: if you join our referral partner programme, your name, company, website, how you plan to recommend Chati and your bank or PayPal details for payouts (stored encrypted). We also record which accounts signed up through your link, the commission you’ve earned and a scrambled version of the internet addresses you sign in from, to stop people referring themselves.
• Partner referrals: if you arrive through a partner’s link, we record the visit against that partner with a scrambled version of your internet address, so a visit is only counted once a day. If you sign up, we tell the partner a masked version of your email address, your plan and what they’ve earned.

We don’t use advertising or analytics trackers on chatibot.ai.

How we use it

• To provide Chati under our contract with you: creating and running your account, taking payment, sending service emails such as receipts and payment reminders, and giving support.
• For our legitimate interests: keeping the service secure and preventing fraud, fixing problems, understanding how Chati is used so we can improve it, and replying when you contact us. We weigh these interests against your rights and keep what we use to the minimum.
• To meet legal obligations: keeping financial and VAT records, and responding to lawful requests from authorities.
• With your consent: occasional product news by email. You can unsubscribe at any time using the link in every email.

Chat conversations on our customers’ websites

When you chat with a Chati assistant on a business’s website, that business is the controller of your conversation and any details you share, such as your name, email address or booking. We process it only on their instructions, under our data processing agreement with them.

To write an answer, Chati sends your question, recent messages in the conversation and the most relevant snippets of the business’s content to an AI provider. The provider returns the reply. It can’t use your conversation to train its models.

If you have questions about a conversation, or want to see or delete it, please contact the business you were chatting with. If you contact us instead, we’ll pass your request on to them.

Who we share it with

We never sell personal data. We share it only with service providers that help us run Chati, under contracts that require them to keep it secure and use it only for us:

• Prostack Hosting, our hosting provider, which runs our servers in London, UK;
• Cloudflare, which protects and speeds up our website and app;
• Stripe, which processes card payments;
• AI providers, which write the answers in chats, as described above;
• Pinecone, in the United States, which holds the search index of each customer’s website content. It doesn’t store chats, leads or visitor details;
• our email provider, which delivers service emails.

We may also share data with our professional advisers, with authorities when the law requires it, or with a buyer if our business is sold, who would have to protect it in the same way. Our current list of subprocessors is available on request.

International transfers

Your account and your workspace’s data are stored in the UK. Some of our providers, including AI providers, Pinecone, Stripe and Cloudflare, may process data in the United States or elsewhere outside the UK. When they do, we make sure the transfer is protected, by relying on the UK’s adequacy regulations (including the UK–US data bridge where the provider is certified) or by using the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

• Your account and workspace data: for as long as you have an account. When it closes, we delete your workspace within 30 days, unless you ask us to export it first.
• Chat conversations: for as long as the business customer keeps them, and deleted with their workspace if they leave.
• Invoices and billing records: six years from the end of the financial year they relate to, as UK tax law requires.
• Enquiries and demo bookings from people who don’t become customers: up to two years.
• Security and server logs: up to 12 months.
• Partner records: for as long as you’re a partner, then six years after your last payout, as UK tax law requires.

Backups are overwritten in the normal cycle, within 30 days.

Your rights

You have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct it, or delete it;
• ask us to restrict how we use it, or object to us using it for our legitimate interests or for marketing;
• ask for the data you gave us in a format you can move to another service;
• withdraw your consent at any time, where we rely on it.

Email [email protected] to use any of these rights. We’ll reply within one month. It’s free, but we may need to confirm who you are first.

Cookies

Most of our cookies are needed for chatibot.ai and Chati to work, so we don’t ask for consent:

• Sign-in cookies keep you logged in to your dashboard securely. They expire when you sign out or after a period of inactivity.
• Security cookies set by Cloudflare protect the site from attacks and bots.
• Payment cookies set by Stripe on the payment step help prevent fraud.

If you arrive through one of our partners’ links, we ask whether we can keep a partner cookie (chati_via) for 60 days, so the partner is credited if you sign up later. It holds only the partner’s code. If you say no, we don’t set it, and a small cookie remembers your answer for a year so we don’t ask again.

We don’t use advertising or analytics cookies. If we ever add them, we’ll ask for your consent first. The Chati chat widget on our customers’ websites remembers an open conversation in your browser so it isn’t lost when you change page.

Contact and complaints

If you have a question or a concern about how we use your data, email [email protected], call +44 (0) 113 873 0127 or write to us at PS Website Design Ltd, No. 1 Aire Street, Leeds, LS1 4PR.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113. We’d appreciate the chance to put things right first.

We may update this policy from time to time. The version and date at the top of this page show when it last changed, and we’ll email customers about significant changes.