Privacy Policy

Chatrivox (“we”, “us”) provides an AI chat widget that local service businesses embed on their websites to answer questions, capture leads, and book appointments. When you sign up as a business, you are our customer. When you chat with an assistant on a customer's website, that business is the data controller and Chatrivox acts as its processor.

• Account data: your name, email, and hashed password (we never store passwords in plain text), or your Google profile if you sign in with Google.
• Business profile: business name, website URL, phone, address, hours, and logo you provide during onboarding.
• Knowledge base: publicly available text crawled from the website URL you connect, used only to answer questions about your business.
• Conversations & leads: messages exchanged with your assistant and any contact details a visitor chooses to share (name, phone, email, service interest).
• Usage & analytics: aggregate counts of conversations, leads, and appointments to power your dashboard.

• Operate the service: answer visitor questions, qualify and store leads, and book appointments.
• Send transactional email (verification, password reset, lead and booking notifications) via our email provider.
• Show you analytics and conversation history in your dashboard.
• Maintain security, prevent abuse, and comply with legal obligations.

To generate replies and search your knowledge base, message content and relevant excerpts of your crawled website are sent to Google Gemini (our AI provider) at the moment of a request. We do not use your data to train foundation models. The assistant answers only from your business content and declines to invent information it does not have.

We rely on a small set of vetted providers to run the service:

• Vercel — application hosting.
• Neon — PostgreSQL database.
• Google (Gemini) — AI chat and embeddings.
• Resend — transactional email delivery.
• Google Calendar — appointment scheduling, only if you connect it.

We keep account, conversation, and lead data for as long as your account is active. You can delete leads and conversations at any time, and deleting your business removes all associated data. Backups are purged on a rolling basis.

Data is encrypted in transit (TLS) and access is isolated per business. OAuth tokens are encrypted at rest. See our Security page for details.

Depending on your location, you may have rights to access, correct, export, or delete your data. Business customers can do most of this in-app; for anything else, email support@chatrivox.com. Website visitors should contact the business they chatted with, who controls that data.

We may update this policy as the product evolves. Material changes will be reflected in the “last updated” date above and, where appropriate, communicated by email.