Privacy Policy

GoChatterBot ("Company," "we," "us," "our") operates the GoChatterBot Hub service and website. We are committed to protecting your privacy. This Privacy Policy explains our data practices, how we collect, use, and share information, and your rights regarding your personal data.

1. WHAT INFORMATION DO WE COLLECT?

In Short: We collect personal information you provide to us, automatically collected information as you use our services, and information from third-party sources.

Personal Information You Disclose

We collect personal information that you provide directly to us, including:

• Account information (names, usernames, passwords)
• Communication preferences and contact methods
• Billing and payment information
• Business address and related details
• Customer support inquiries and feedback
• Any other information you voluntarily provide

Sensitive Information

We do not ask for sensitive information such as Social Security numbers, medical records, racial or ethnic origin, religious beliefs, or other protected characteristics. A chat window cannot stop someone from typing such details, so please do not enter them; numbers that look like Social Security or payment card numbers are replaced before a chat is written to our records.

Chatbot Conversations

When someone uses a GoChatterBot chat window on a website that uses our service, that website sends us the question, the earlier messages of the same conversation, the address of the page it was asked on, and the visitor's IP address. We use them to find an answer in that website's own published content and send it back. For these conversations we act on behalf of the website owner, and the website owner's own privacy policy applies to its visitors.

For each question we record the question and answer, the website and page, the time, the visitor's IP address, an approximate city and region looked up from that IP address, whether the visitor rated the answer as helpful, and the amount of text processed and its cost. We use these records to count usage against the website owner's plan, to prevent abuse, and to look into answers the website owner or visitor reports as wrong. We do not use chat records for advertising and we do not sell them.

The website owner's WordPress site also keeps its own copy of its conversations, which the website owner controls and can delete.

Information Collected Automatically

When you visit or use our website and services, we automatically collect certain technical information:

• Internet Protocol (IP) address
• Browser type and version
• Operating system and device type
• Device identifiers and names
• Language preferences and settings
• Referring URLs and pages visited
• Geographic location and country
• Service usage patterns and interaction data

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your personal information for purposes including service delivery, communication, security, and compliance with legal obligations.

We process your information for the following purposes:

• To Provide and Improve Our Services: We process your data to deliver, maintain, and enhance the GoChatterBot Hub platform and features.
• To Communicate With You: We send administrative updates, responses to inquiries, billing notifications, and service announcements.
• To Process Transactions: We process billing information and fulfill orders for our services and products.
• To Ensure Security and Prevent Fraud: We monitor and analyze data to detect unauthorized access, fraud, and security threats.
• To Comply With Legal Obligations: We process information as required by applicable laws and regulations.
• To Request Feedback: We may contact you to gather feedback on our services.
• For Marketing and Promotional Purposes: We may send marketing communications if you have opted in, and measure campaign effectiveness.
• To Identify Usage Trends: We analyze how users interact with our services to improve functionality and user experience.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We process your information based on legal grounds including your consent, contract performance, legitimate interests, and legal compliance.

If You Are Located in the EU or UK:

The General Data Protection Regulation (GDPR) requires us to establish lawful bases for processing your personal data. We rely on the following legal bases:

• Consent: We process your data where you have given us explicit consent.
• Contract Performance: We process data necessary to provide you with requested services and fulfill our obligations.
• Legitimate Interests: We process data where we have legitimate business interests that are not overridden by your rights.
• Legal Obligations: We process data as required by applicable laws and regulations.
• Vital Interests: We may process data to protect your vital interests or those of others.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We share personal information only with the service providers that run parts of our service for us, and in a business transfer.

Service Providers

These companies process personal information for us, only to provide their part of the service:

• OpenAI: writes chat answers. It receives the question, the earlier messages of the conversation, and excerpts of the website's content. It does not receive the visitor's IP address or name.
• PayPal: takes subscription payments. Card details are entered with PayPal; we never receive or store your full card number.
• Cloudflare: delivers our website and runs the Turnstile check that stops automated form submissions.
• ip-api.com: looks up an approximate city and region from an IP address.
• Google (Analytics and Tag Manager): measures website visits, only if you accept analytics cookies.
• Our hosting provider: runs the servers, located in the United States, that store our records and send our emails.

Business Transfers

If GoChatterBot is involved in a merger, acquisition, bankruptcy, or other business transaction, your personal information may be transferred as part of that transaction. We will provide notice and the opportunity to opt out if your data practices change materially.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: Yes, we use cookies and similar tracking technologies to enhance your experience and analyze usage.

We use cookies, web beacons, pixels, and similar tracking technologies to:

• Remember your preferences and settings
• Understand how you use our website and services
• Improve service functionality and user experience
• Measure the effectiveness of marketing campaigns
• Personalize content and recommendations

Analytics cookies (Google Analytics and Google Tag Manager) load only after you accept them in the banner shown on your first visit. You can change your choice at any time with the Cookie settings link at the bottom of every page. You can also control cookies through your browser settings; disabling them may limit some features of our website.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy.

The retention period depends on the context of processing and our legal obligations. We retain personal information for the duration of your account relationship and as long as necessary to:

• Provide and improve our services
• Fulfill legal and contractual obligations
• Resolve disputes and enforce agreements
• Establish, exercise, or defend legal claims

Chat records described under Chatbot Conversations are kept while we provide the service to the website they came from. A website owner can ask us to delete its chat records at any time, and a visitor can ask us to delete the records of their own conversations; tell us the website, the approximate date and time, and if possible the question asked.

If you request deletion of your account, we will remove your account information promptly, unless retention is required by law. Payment records are kept as long as tax law requires.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We implement appropriate technical and organizational security measures to protect your data.

We use industry-standard security measures including:

• SSL/TLS encryption for data in transit
• Secure password hashing and storage
• Access controls and authentication mechanisms
• Regular security audits and updates
• Monitoring for suspicious activity and intrusions

However, no security system is completely impenetrable. While we strive to protect your information, we cannot guarantee absolute security against all potential threats.

8. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect information from individuals under 18 years of age.

Our services are intended for users 18 years or older. We do not knowingly collect personal information from minors. If we become aware that we have collected information from someone under 18, we will promptly delete it. If you believe we have collected information from a minor, please contact us at [email protected].

9. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: You have rights regarding your personal information, including access, correction, deletion, and data portability.

Rights for EU and UK Residents:

Depending on your location, you may have the following rights:

• Right of Access: You can request what personal information we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete information.
• Right to Erasure (Right to be Forgotten): You can request deletion of your personal information under certain circumstances.
• Right to Restrict Processing: You can request that we limit how we use your information.
• Right to Data Portability: You can request your data in a portable format suitable for transfer.
• Right to Object: You can object to processing based on legitimate interests or marketing.

Withdrawing Consent

If we process your information based on your consent, you can withdraw it at any time. This will not affect the legality of processing based on consent before withdrawal.

Marketing Communications

You can opt out of marketing and promotional communications by clicking the unsubscribe link in our emails or by emailing us at [email protected].

Cookie Controls

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being set.

To Exercise Your Rights

To exercise any of these rights, please email us at [email protected]. We will verify your identity and respond within applicable legal timeframes.

10. CONTROLS FOR DO-NOT-TRACK FEATURES

In Short: Most web browsers and some mobile devices include a Do-Not-Track feature, but no unified standard has been finalized.

Although many browsers and devices offer Do-Not-Track functionality, there is currently no industry-wide standard for recognizing and implementing Do-Not-Track signals. Therefore, we do not currently respond to Do-Not-Track browser signals. However, you can still control cookies and tracking technologies through your browser settings and device preferences.

11. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: California residents have specific privacy rights under state laws, including the CCPA.

California Consumer Privacy Act (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the right to:

• Right to Know: You can request what personal information we collect, use, and share.
• Right to Delete: You can request deletion of personal information we have collected, with certain exceptions.
• Right to Opt-Out: You can opt out of the sale or sharing of your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• Limit Use of Sensitive Information: You can request that we limit our use of sensitive personal information.

Categories of Personal Information Collected

Under the CCPA, we are required to disclose the categories of personal information we collect:

Category	Collected
Identifiers (name, email, IP address, etc.)	YES
Personal Information Categories (address, phone, etc.)	YES
Commercial Information (purchases, transactions)	YES
Biometric Information	NO
Internet Activity (browsing history, interactions)	YES
Geolocation Data	YES
Sensory Information	NO
Professional or Education Information	NO
Protected Classification Data	NO

Sale and Sharing of Personal Information

GoChatterBot has not sold or shared personal information of California residents in the past 12 months. We do not intend to sell or share personal information in the future without providing notice and the opportunity to opt out.

Verification Process

To verify your identity and process your CCPA request, we will ask for information to confirm you are the person making the request. We may contact you for additional information to complete verification.

12. DO VIRGINIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Virginia residents have specific privacy rights under the Consumer Data Protection Act (CDPA).

Consumer Data Protection Act (CDPA)

If you are a Virginia resident, the CDPA grants you the following rights:

• Right to Know: You can request what personal information we collect and how we use it.
• Right to Delete: You can request deletion of your personal information, with certain exceptions.
• Right to Opt-Out: You can opt out of processing for targeted advertising and sales of personal information.
• Right to Appeal: If you disagree with our decision on your request, you have the right to appeal.

How to Exercise Your Rights

To exercise your CDPA rights, email us at [email protected]. We will verify your identity and respond within the timeframe required by law.

13. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we may update this Privacy Policy to reflect changes in our practices or legal requirements.

We may revise this Privacy Policy from time to time as our business practices evolve or legal requirements change. If we make material changes, we will notify you by updating the "Last Updated" date at the top of this policy. For significant changes, we may provide additional notice, such as email notification or a prominent notice on our website.

Your continued use of our services after any changes constitutes your acceptance of the updated Privacy Policy.

14. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at [email protected]. We will respond to your inquiry within 30 days.

15. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

In Short: You can request access to, update, or delete your personal information by emailing us at [email protected].

To review, update, or request deletion of your personal information, please email us at [email protected]. We will process your request in accordance with applicable laws and regulations.

Last Updated: September 30, 2026