Privacy Policy
Last updated: June 2026
1. Information Collection
Personal Information
We collect information you provide directly to us, including name, email address, company details, and project descriptions when you submit contact forms, book consultations, or engage our chatbot and automation consulting services.
Conversation and Project Data
When we deliver chatbot or automation projects, we may process business data you provide for integration, training, and support. The scope of data processing is defined in your statement of work or service agreement.
Technical Data
We automatically collect certain information about your device and how you interact with our website, including IP address, browser type, and usage patterns.
2. Use of Information
Service Provision
We use collected information to provide, maintain, and improve our services, process transactions, and communicate with you about service updates and security matters.
Security & Compliance
Your information helps us detect and prevent fraud, abuse, and security incidents. We also use it to comply with legal obligations and regulatory requirements.
Analytics
We analyze usage patterns to improve our services, develop new features, and enhance user experience.
3. Data Protection
Security Measures
We implement industry-standard security measures to protect your information, including encryption, secure socket layer technology (SSL), and regular security assessments.
Data Retention
We retain your information only for as long as necessary to provide our services and comply with legal obligations. You can request deletion of your data subject to legal requirements.
4. Your Rights
Access & Control
You have the right to access, correct, or delete your personal information. You can also opt out of certain data collection and marketing communications.
Data Portability
You can request a copy of your data in a structured, commonly used format.
5. Updates to Policy
Changes
We may update this privacy policy from time to time. We will notify you of any material changes via email or through our platform.
6. GDPR Compliance
Legal Basis for Processing
We process personal data under the following legal bases: consent, contract fulfillment, legal obligations, and legitimate interests. Each processing activity is reviewed to ensure it meets GDPR requirements.
Data Subject Rights
Under GDPR, you have rights to: access, rectification, erasure, restrict processing, data portability, and object to processing. Contact our Data Protection Officer to exercise these rights.
International Transfers
When transferring data outside the EEA, we ensure appropriate safeguards through Standard Contractual Clauses or adequacy decisions.
Data Protection Officer
Our DPO can be contacted at dpo@chainable.co for any privacy-related inquiries or rights exercises.
7. Additional Compliance
CCPA Compliance
California residents have specific rights regarding their personal information under the CCPA, including the right to know, delete, and opt-out of sales.
APPI Compliance
For users in Japan, we comply with the Act on Protection of Personal Information (APPI) requirements for data handling and transfer.
LGPD Compliance
Brazilian users are protected under the Lei Geral de Proteção de Dados (LGPD), with similar rights to GDPR.
8. Cookie Policy
Essential Cookies
Required for basic site functionality. Cannot be disabled.
Analytics Cookies
Used to improve our services. Can be disabled through your cookie preferences.
Marketing Cookies
Used for targeted advertising. Require explicit consent before activation.
9. AI and Chatbot Data Processing
Client Data in Projects
For chatbot and automation engagements, we process client-provided data only as needed to design, build, test, and support the agreed solution. We do not use client confidential data to train public models without explicit written consent.
Automated Interactions
Chatbots we deploy may log conversations for quality assurance, analytics, and support. Retention periods and access controls are configured per project requirements and documented in your agreement.
Third-Party AI Providers
Some solutions may use third-party language model APIs. We disclose relevant subprocessors in project documentation and configure data handling to meet your compliance requirements where applicable.
10. Consulting Records
Inquiry and Communication Records
We retain contact form submissions, discovery call notes, and project communications as needed to respond to inquiries, deliver services, and maintain business records.
Data Retention Requests
You may request access, correction, or deletion of personal information we hold, subject to legal and contractual retention requirements.