How InsertChat handles assistant data

• No Data Sharing or Selling: We do not utilize, disclose, or sell your data in any form.
• Robust Security Measures: We use industry-leading encryption, conduct regular security audits, implement stringent access controls, and maintain continuous monitoring to protect your data.
• Complete Data Control: Unlike some of our competitors, we maintain full control over our infrastructure and do not outsource to external vector databases.

We collect data to provide, improve, and personalize our services when you:

• Visit our website at https://insertchat.com or associated sites.
• Engage with us through sales, marketing, or events.
• Participate in activities on our Services.

Personal Data Provided by You:

• Voluntary Information: Includes email addresses, passwords, and payment data (processed by Stripe, see Stripe Privacy Policy).
• Account and Authentication Data: Necessary for account creation, access, and maintenance.

Automatically Collected Data:

• Technical and Usage Information: Includes IP addresses, browser details, operating systems, usage data, and interaction logs. This data is collected primarily for security, analytics, and service improvement.

We process your data under the following legal bases, compliant with the GDPR and UK GDPR:

• Consent: Where you have provided explicit consent.
• Contractual Necessity: To fulfill our contractual obligations or pre-contractual requests.
• Legal Obligations: To comply with legal requirements.
• Legitimate Interests: To support our business interests in a manner that is not overridden by your rights.

• Account Creation and Management: To facilitate account creation, login, and maintain your account in working order.
• Service Delivery: To provide and improve the services you request, such as responding to your inquiries and providing support.
• Administrative Communications: To send you important updates and information about our products, services, terms, and policies.
• Security and Fraud Prevention: To maintain the security and integrity of our Services and protect against unauthorized access.
• Legal Compliance: To comply with applicable legal obligations and regulatory requirements.

We retain data only as long as necessary to fulfill the purposes outlined in this notice, or as required by law. Specific retention periods are determined based on criteria such as legal obligations, business needs, and data minimization principles. For example:

• Account Data: Retained as long as you have an account with us.
• Payment Data: Retained in accordance with accounting and tax compliance requirements.

When data is no longer needed, it will be securely deleted or anonymized.

We may share data in specific scenarios, such as:

• Business Transfers: In the event of mergers, acquisitions, or asset sales, data may be transferred under strict confidentiality and protection obligations.
• Service Providers: With parties who process data on our behalf under stringent confidentiality and data protection obligations.

We implement comprehensive technical and organizational measures to secure your data, including:

• Industry-leading encryption for data in transit and at rest.
• Regular security audits and continuous monitoring.
• Stringent access controls to ensure only authorized personnel have access to data.

Despite our best efforts, no method of electronic transmission or storage is completely secure. Therefore, while we strive to protect your data, we cannot guarantee its absolute security.

Depending on your location, you have various rights regarding your personal data, including:

• Right to Access: To request access to your personal data.
• Right to Rectification and Erasure: To correct or delete your data.
• Right to Restrict Processing and Object: To restrict or object to the processing of your data.
• Right to Data Portability: To request a copy of your data in a portable format.

15.1 California Residents

California Civil Code Section 1798.83 (Shine The Light law) allows California residents to request information about personal data disclosures for direct marketing purposes. California residents can also request the removal of unwanted data posted publicly. Please visit our contact page to exercise these rights.

15.2 Virginia Residents

Under the Virginia Consumer Data Protection Act (CDPA), Virginia residents have specific rights related to accessing, correcting, deleting, and opting out of the processing of their personal data. To exercise these rights, please use our contact page.