Privacy Policy

This Privacy Policy applies to visitors of our marketing websites, trial users, paying customers and individuals who communicate with our customers through KonnectBot-powered chat experiences. Depending on your relationship with us, different data elements may apply.

If you are an end customer chatting with a business that uses KonnectBot, that business is typically the controller of your conversation data; we process such data on their instructions as a processor, subject to our agreements with them and this policy where applicable.

We collect information in the following broad categories:

• Account & profile data: name, email, company name, role, authentication identifiers, billing contacts and preferences you set in the product.
• Billing data: subscription plan, payment status and transaction references. Payment card data is handled by our payment partners. We do not store full card numbers on our servers.
• Service & conversation data: messages, attachments, metadata (timestamps, channel, routing), agent actions, tags, internal notes where enabled and integration payloads such as order IDs when you connect storefronts.
• Usage & diagnostics: product interactions, feature usage, performance logs, error reports and approximate location derived from IP for fraud prevention and localization.
• Support & communications: content of emails, chat transcripts with our team, call notes where applicable and feedback you provide.
• Device & technical data: browser type, operating system, language, referrer URLs and cookies or similar technologies as described in our Cookie Policy.

We may also receive information from third parties such as single sign-on providers, analytics tools, or your connected integrations (for example, ecommerce platforms), in accordance with your settings and those third parties' policies.

We use personal information to:

• Provide, operate, secure and improve the Services
• Authenticate users, prevent fraud and enforce our terms
• Process payments, invoices and subscription changes
• Provide customer support and respond to requests
• Send service-related notices, security alerts and administrative messages
• Analyze usage in aggregate or de-identified form to improve UX and reliability
• Train and operate optional AI features where permitted by contract and law, with safeguards
• Comply with legal obligations and defend our legal rights
• Send marketing communications where allowed. You may opt out as described below.

Where the GDPR or similar laws apply, we rely on appropriate legal bases such as contract performance, legitimate interests (balanced against your rights), consent where required, and legal obligation.

We may share information with:

• Service providers who host infrastructure, deliver email, process payments, provide analytics, or assist security monitoring under confidentiality and processing terms.
• Integrations you enable (for example, ecommerce or CRM connectors) according to your configuration.
• Professional advisors such as lawyers and accountants under professional obligations of confidentiality.
• Authorities when required by law or to protect the rights, safety and security of our users and the public.
• Business transfers in connection with a merger, acquisition, or asset sale, with notice where required.

We do not sell your personal information in the conventional sense. Where "sale" is defined broadly under U.S. state laws, we provide choices as required.

We implement administrative, technical and organizational measures designed to protect personal information, including encryption in transit, access controls, monitoring and vendor reviews. No method of transmission or storage is 100% secure; we encourage strong passwords, MFA where available and least-privilege access for your own team.

More detail is available on our Security page.

We retain information for as long as needed to provide the Services, comply with law, resolve disputes and enforce agreements. Retention periods may differ by data category and customer configuration (for example, workspace-level data deletion or export). When data is no longer needed, we delete or de-identify it in accordance with our internal schedules and contractual commitments.

We may process information in the United States and other countries where we or our providers operate. If we transfer personal data from the EEA, UK, or Switzerland, we use appropriate safeguards such as Standard Contractual Clauses or other mechanisms recognized by applicable law.

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing and to data portability. You may also withdraw consent where processing is consent-based.

• EEA/UK/Switzerland: you may lodge a complaint with your local supervisory authority.
• United States (state privacy laws): you may have rights to know, delete, correct, opt out of certain sharing and appeal denials where applicable.
• Marketing: use unsubscribe links in emails or contact us with your request.

To exercise rights, email privacy@konnectbot.com. We may need to verify your identity before fulfilling requests.

The Services are not directed to children under 16 (or the age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, contact us and we will take appropriate steps to delete it.

Automated processing & AI

Certain features may use machine learning or AI to suggest replies, categorize topics, or assist agents. You should review AI-assisted content before use in high-risk contexts. We work to reduce harmful or biased outputs, but automated systems can make mistakes. Your agreement with us and product settings may provide additional controls.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. If changes are material, we will provide additional notice as required by law (for example, email or in-product notification).

Questions or requests regarding this Privacy Policy: privacy@konnectbot.com. General inquiries: Contact page.