This Privacy Policy explains how aurochat collects, uses, stores, and deletes information when you use our website, dashboard, and embeddable chat widget.
1. Who we are
aurochat is a SaaS product that helps businesses create AI assistants trained on their own knowledge and embed those assistants on their websites.
For privacy questions, contact us at: support@aurochat.app.
2. Information we collect from account users
When you create an account, we may collect your name, email address, authentication information, workspace details, company name, website URL, billing status, plan information, and product usage data.
3. Knowledge sources
When you upload files, add URLs, or paste text, we process that content so your assistant can answer questions from it. Knowledge sources may include business documents, help content, policies, service descriptions, and other materials you choose to provide.
4. Chat widget data
When a visitor uses an aurochat widget on a customer website, we may process chat messages, timestamps, anonymous visitor identifiers, widget session information, origin domain, feedback, fallback events, and lead form submissions.
5. Lead information
If a visitor submits a contact form through the widget, we may collect name, email address, optional phone number, optional message, consent timestamp, and the related conversation context. This information is provided to the business that owns the assistant.
6. How we use information
We use information to provide the product, authenticate users, process knowledge sources, generate assistant answers, display conversations and leads, enforce plan limits, send transactional emails, prevent abuse, troubleshoot issues, improve reliability, and comply with legal obligations.
7. AI processing
aurochat uses Gemini for embeddings and answer generation. Knowledge sources and chat messages may be sent to AI services as required to provide assistant functionality.
8. Billing
Payments and subscriptions are handled through Stripe. aurochat does not store full payment card details. Stripe may process billing information according to its own terms and privacy policy.
9. Email
We use email services to send authentication emails, lead notifications, source failure notifications, quota alerts, and billing-related messages.
10. Storage and retention
Conversation retention depends on the active plan. Free workspaces retain conversations for 30 days. Starter workspaces retain conversations for 90 days. Pro is Coming soon and is expected to provide 365-day retention. Knowledge sources remain stored while the account is active unless deleted by the user.
12. Subprocessors
aurochat may use infrastructure, AI, payment, email, database, hosting, and storage providers to deliver the service. These may include Supabase, Google Gemini, Stripe, Resend, and Vercel, depending on the configured production environment.
13. Data sharing
We do not sell personal data to advertisers. We may share information with service providers that help operate aurochat, with the business that owns the assistant, when required by law, or to protect the safety and security of the product.
14. Data deletion
Account users may delete their account from the dashboard. Account deletion permanently removes or schedules deletion of workspace data, documents, embeddings, conversations, leads, and related records, except where retention is required for security, billing, legal, or operational reasons.
15. Your rights
Depending on your location, you may have rights to access, correct, export, or delete personal information. Contact support@aurochat.app to make a request.
16. Security
We use technical and organizational measures intended to protect information, including authentication, access controls, private storage for knowledge sources, server-side validation, and domain validation for widgets. No system can be guaranteed completely secure.
17. Changes to this policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new “Last updated” date.