1. Overview & Data Philosophy
Core Guarantee
KonnectBot operates under a zero-retention algorithmic trust premise. Merchant transactional records and consumer chat logs remain client-owned proprietary property.
This Privacy Policy details how Techify Aura LLC (“KonnectBot”, “Company”, “we”, “us”, or “our”) processes, stores, shields, and governs personal information through the KonnectBot platform, associated APIs, customer management dashboards, and embeddable live chat storefront widgets.
Our foundational design axiom is simple: Enterprise conversation intelligence does not require surveillance. We process data strictly to facilitate real-time support routing, automated inventory lookup, return execution, and merchant-directed conversational agent workflows.
Key Architectural Axioms:
- Data Isolation: Multi-tenant isolation at the relational database tier using Row-Level Security (RLS).
- Ephemeral Processing: In-memory conversation context windows purged upon session finalization.
- Sovereign Boundaries: European Union merchant traffic pinned entirely to Frankfurt & Dublin AWS regions.
2. Information We Collect
Depending on whether you are an authorized merchant enterprise account holder or an end-consumer using an integrated KonnectBot widget, we collect and categorize data strictly as delineated below:
A. Merchant Data
- • Corporate emails & passwords
- • Billing details (via Stripe token)
- • Store domain & catalog URLs
- • Agent seat allocation logs
B. Conversation Streams
- • Chat transcripts & order inquiries
- • Customer names & emails (opt-in)
- • Order IDs & tracking lookups
- • Sentiment & intent classifications
C. Store Telemetry
- • Anonymized session IDs
- • Browser client agent & locale
- • Latency & API response metrics
- • Trigger funnel conversions
Financial Data Exclusion: KonnectBot never handles, records, or stores raw payment card numbers (PANs) or CVVs. All checkout completions occur within the native merchant storefront gateway (e.g., Shopify Checkout) or your payment provider.
3. How We Use Information & AI Inference Pipeline
Information collected is used strictly to fulfill algorithmic support dispatching, sync order statuses, and deliver low-latency conversational assistance. When an end-consumer prompts KonnectBot, data travels through a sandboxed pipeline:
We do not sell personal data, license user conversation histories, or use consumer inputs for cross-context behavioral advertising.
4. Zero-Model-Training Policy
Explicit Non-Training Undertaking
We contractually and technically guarantee that no merchant proprietary data, catalog inventory, or customer conversation transcript is ever used to train, retrain, fine-tune, or weight any public foundational AI models (including GPT, Claude, Llama, or any future proprietary models).
Our foundational AI inference calls leverage enterprise agreements with dedicated zero-data-retention endpoints (ZDR). Under these strict provisions:
- API requests are purged from vendor GPU clusters immediately upon token stream completion.
- Data from Merchant A cannot, under any mathematical vector state, inform predictions or generations made for Merchant B.
- Vector embeddings created for merchant knowledge bases remain fully isolated within encrypted tenant namespaces.
5. Third-Party Integrations & Sub-Processors
To deliver seamless omnichannel bot delivery and high-availability operations, KonnectBot engages verified sub-processors subjected to rigorous annual third-party risk evaluations:
| Sub-Processor | Role & Scope | Location | Safeguards |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud Infrastructure & Encrypted Databases | US & EU Regions | SOC 2, ISO 27001, SCCs |
| Shopify Inc. | E-commerce API Integration & Order Lookup | Canada & Global | GDPR Compliant Webhooks |
| Social messaging | Web chat is live. Facebook and Instagram are live. WhatsApp is not offered. | USA & Ireland | End-to-End Encrypted Transit |
| Stripe, Inc. | Merchant SaaS Subscription Billing | USA | Handled by your payment provider |
6. Data Retention, Anonymization & Deletion
We retain personal data only for as long as necessary to fulfill the operations authorized by the merchant or required by applicable statutory obligations:
Active chat logs are preserved for 90 days by default, configurable by merchants down to 24 hours via automated lifecycle retention rules.
Upon cancellation of a KonnectBot merchant plan, all primary tenant database records are wiped within 30 days, with rolling cold backups expunged within 60 days.
7. International Data Transfers & SCCs
If your operations involve transfers of personal data originating within the European Economic Area (EEA), United Kingdom, or Switzerland to jurisdictions without an adequacy decision, KonnectBot applies the European Commission’s Standard Contractual Clauses (SCCs) Module 2 (Controller-to-Processor) and Module 3 (Processor-to-Processor).
Furthermore, we implement supplemental technical safeguards including client-side envelope encryption and zero-knowledge vector indexing where applicable.
8. User Rights (GDPR, CCPA, Access & Portability)
Subject to your jurisdiction, you possess explicit legal rights concerning your personal information. As an end-customer interacting through a merchant’s KonnectBot widget, requests can be filed directly through the merchant or to our privacy team:
Right to Access & Portability
Request a machine-readable JSON archive of all logged chat transcripts and telemetry linked to your identity.
Right to Erasure ("To Be Forgotten")
Trigger programmatic redaction and deletion across all production vector stores and conversation databases.
Right to Rectification
Correct inaccurate, incomplete, or outdated personal metadata retained within agent ticket notes.
Right to Opt-Out (CCPA/CPRA)
We do not sell personal data or share it for cross-context behavioral marketing. You may opt out of all analytical telemetry.
9. Cookies & Tracking Technologies
The KonnectBot storefront chat widget relies solely on functional storage items (HTML5 `localStorage` and strictly necessary session tokens) to maintain conversation persistence as users navigate across product pages.
We do not inject third-party ad retargeting pixels or fingerprinting scripts through our conversational embed code.
10. Security Safeguards & Vulnerability Disclosure
We enforce defense-in-depth protocols including role-based access control (RBAC), multi-factor hardware keys for all engineering personnel, and continuous external penetration testing.
Responsible Disclosure: If you believe you have detected a security flaw or vulnerability within KonnectBot infrastructure, please contact us immediately at security@konnectbot.com. We acknowledge submissions within 24 hours.
11. Data Protection Officer (DPO) Contact Details
For formal legal notices, data subject requests, or regulatory inquiries, you can reach out directly to our appointed Data Protection Officer and compliance counsel:
Techify Aura LLC
Attn: Privacy & Data Governance Officer
30 N Gould St, Suite R
Sheridan, WY 82801
United States of America