Privacy Policy

1. Introduction

Welcome to ChatRos AI Agent ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered shopping assistant service.

2. Information We Collect

2.1 Information You Provide

• Account information (name, email address, password)
• Site credentials (WooCommerce/Shopify API keys)
• Payment information (processed securely through third-party payment processors)
• Support communications and feedback

2.2 Automatically Collected Information

• Usage data (features used, time spent, interactions)
• Device information (browser type, operating system, IP address)
• Conversation logs between customers and the AI agent
• Analytics data (page views, conversion rates, user flows)

2.3 Third-Party Data

• Product information from your e-commerce platform
• Customer interaction data from your site
• Order and inventory information via API integrations

3. How We Use Your Information

We use the collected information for the following purposes:

• Providing and maintaining our AI agent service
• Processing your transactions and managing subscriptions
• Improving and personalizing user experience
• Training and optimizing our AI models
• Sending service updates, security alerts, and support messages
• Analyzing usage patterns to improve our platform
• Detecting and preventing fraud or abuse
• Complying with legal obligations

4. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who assist in operating our service (hosting, payment processing, analytics)
• AI Partners: Anthropic and OpenAI for AI model processing (data is processed according to their privacy policies)
• Legal Requirements: When required by law, court order, or governmental request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share information

We do not sell your personal information to third parties.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption of data in transit (TLS/SSL) and at rest (AES-256)
• Secure storage of API credentials using encryption
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Secure backup and disaster recovery procedures

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Conversation logs are retained for 90 days for analytics and improvement purposes. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Restriction: Request limitation of processing in certain circumstances

To exercise these rights, contact us at privacy@chatros.com.

8. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. See our Cookie Policy for detailed information.

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our service.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

10. Children's Privacy

Our service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

12. Google User Data (Google API Services)

When you choose to connect your Google account, ChatRos accesses certain Google user data through the Google API Services, solely to provide the features you enable. Specifically:

• Google Sheets (spreadsheets scope): we read the content of the specific spreadsheets you connect, so your AI agent can answer your customers with up-to-date information; create a new spreadsheet when you click "Create new"; and append your captured orders and leads as rows to a spreadsheet you select.
• File selection (drive.file scope, via the Google Picker): used only so you can choose which of your files to connect — we can access only the files you explicitly pick or create, never your wider Google Drive.
• Basic profile email (userinfo.email scope): used only to show you which Google account is connected.

We only access files you explicitly connect, pick, or create. We do not access any other files in your Google Drive, we do not sell or rent your Google user data, we do not use it for advertising, and we do not use it to train generalized or independent artificial-intelligence or machine-learning models. Your Google access and refresh tokens are stored encrypted, and you can disconnect Google at any time, which revokes our access.

ChatRos's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

13. Mobile Application

Our Android and iOS applications collect and process the following, solely to provide the features you use:

• Account data: your name, email address and account identifiers, used to sign you in and operate your workspace.
• Messages and content: the conversations, replies, catalog entries and customer records you view, create or send in the app.
• Photos and images: images you attach to a conversation or add as product images are uploaded to your workspace. The app requests photo/camera access only when you choose to attach an image.
• Voice recordings: when you record a voice reply, the app requests microphone access and uploads the audio to your workspace. Audio is recorded only while you actively record a reply.
• Documents and files: files you choose to upload (e.g. training documents) are stored in your workspace.
• Push-notification identifiers: with your permission, we register a device notification token (Google Firebase Cloud Messaging) to send push notifications about your conversations.

On-device only: if you enable the biometric app lock, your fingerprint or face data is processed entirely by your device's operating system and is never transmitted to or stored by us.

No advertising or third-party analytics: the mobile app includes no advertising SDKs and does not collect analytics or crash-reporting data through third-party services. We do not access your device contacts or location.

Deleting your data: you can permanently delete your account and data in the app at Account → Delete Account, or request deletion at privacy@chatros.com or chatros.com/data-deletion.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: