Skip to content

Legal

Privacy Policy

This policy explains what Chatsy collects, why we use it, and which services may process it.

Last updated: August 31, 2026

2 min read

Terms of Service

This policy covers account data, source content, chatbot conversations, service providers, analytics, and privacy requests.

The controls listed below match the product today. Where the dashboard does not provide a self-serve control, contact us.

01Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication information. Passwords are stored as one-way bcrypt hashes, not readable passwords.

Content Data

We store the documents, text, website URLs, and knowledge base content you add. Chatsy processes and indexes this content so an agent can retrieve relevant material when answering.

Conversations and Service Data

We store chatbot conversations, messages, leads, tickets, usage totals, and technical records needed to run, secure, and troubleshoot the service.

02How We Use Your Information

Service Provision

We use account, content, and conversation data to operate Chatsy. This includes retrieving source material and sending prompts, relevant context, and tool inputs to AI or integration providers when a feature requires it.

Communication

We use your email address for account, security, billing, and service messages. We may also send product updates where permitted by law.

Security & Compliance

We process necessary data to maintain security, prevent fraud, and comply with legal obligations.

03Data Security

At a glance

Passwords are hashed, workspace roles limit access, and saved integration credentials are encrypted.

Passwords

Chatsy hashes passwords with bcrypt before storing them. A password hash cannot be read back as the original password.

Workspace Access

Authentication, workspace roles, and resource permissions limit which team members can reach agents, mailboxes, and knowledge bases.

Integration Credentials

Chatsy encrypts saved integration credentials with AES-256-GCM and uses them on the server when an approved integration action runs.

04Data Sharing

At a glance

We do not sell or rent personal data. Hosting, AI, billing, email, and analytics providers may process it to run Chatsy.

No Sale of Personal Data

We do not sell or rent personal data. We share data with service providers only when needed to operate Chatsy, complete a request, or meet a legal obligation.

Service Providers

Hosting, database, authentication, email, billing, analytics, AI, and integration providers may process data for Chatsy. Their own terms and privacy notices also apply to their processing.

Legal Requirements

We may disclose information if required by law, court order, or to protect our rights and safety.

05Your Rights

At a glance

Contact us to request access, correction, export, account closure, or deletion. We review each request under applicable law.

Dashboard Access

You can view much of your account, source, and conversation data in the dashboard. The dashboard does not currently provide a complete account export or account deletion control.

Access, Export, and Deletion Requests

Contact us to request access, correction, export, account closure, or deletion. We will review the request under applicable law and may retain records required for security, billing, disputes, backups, or legal obligations.

Content Controls

The dashboard includes controls for removing individual sources and agents you manage. Removing content from the dashboard is separate from closing an account or making a broader privacy request.

06Cookies & Tracking

Essential Cookies

Chatsy uses cookies for authentication and other functions required by the signed-in service.

Google Analytics

When a Google Analytics measurement ID is configured, the public website loads Google Analytics. It records page views and related browser, device, and network information under Google's terms. Google Analytics may set or read cookies and similar identifiers.

Advertising

Chatsy does not currently load advertising pixels or use website analytics to serve targeted ads. Google Analytics still measures visits as described above.