Privacy Policy

1. Introduction

Welcome to Chatloom ("we," "our," or "us"). This Privacy Policy explains how WORKSJO LTD (registered in England and Wales, ICO Registration: ZB810612) collects, uses, discloses, and safeguards your information when you use our AI-powered chatbot platform and services. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR) where applicable.

2. Information We Collect

2.1 Information You Provide

• Account information (name, email address)
• Billing information (processed securely through Stripe)
• Chatbot configuration data
• Training data and conversation history
• Customer support communications

2.2 Automatically Collected Information

• Usage data and analytics
• Device information and IP address
• Cookies and similar tracking technologies
• Log files and error reports

3. How We Use Your Information

• To provide and maintain our services
• To process your transactions and subscriptions
• To improve and optimize our platform
• To send you updates, security alerts, and support messages
• To detect, prevent, and address technical issues
• To comply with legal obligations

4. AI and Data Processing

Chatloom uses artificial intelligence (AI) powered by Anthropic's Claude to provide chatbot services. When you use our platform:

• Your training data is processed to improve chatbot responses
• Conversation data may be analyzed to enhance service quality
• We implement encryption and security measures to protect your data
• AI model providers may process data according to their terms

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Anthropic (AI), Stripe (payments), Supabase (database), Vercel (hosting)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do NOT sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit and at rest
• Regular security audits and updates
• Access controls and authentication
• Secure data centers and infrastructure

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Conversation data is retained for 30 days by default but can be configured in your settings.

8. Your Rights

Under the UK GDPR and EU GDPR, you have the following rights:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Opt-out of marketing communications
• Withdraw consent

9. Cookies

We use cookies and similar technologies for authentication, preferences, and analytics. You can control cookies through your browser settings.

10. Automated Decision-Making

Our AI chatbot uses automated processing to generate responses based on your inputs. These responses do not produce legal or similarly significant effects on you. The AI does not make decisions about your access to services, pricing, or eligibility. You have the right to request human review of any AI-generated response by contacting us at support@chatloom.app.

11. International Data Transfers

Your data may be transferred and processed in countries outside your jurisdiction, including the United States. We use Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO) and the European Commission to ensure appropriate safeguards are in place for international data transfers. Our sub-processors include Anthropic (AI processing, US), OpenAI (AI processing, US), Stripe (payments, US), Vercel (hosting, US), Clerk (authentication, US), and Supabase (storage, US).

12. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect data from children.

13. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). You have the right to: know what personal information we collect and how it is used; request deletion of your personal information; opt-out of the sale or sharing of personal information (we do not sell personal information); non-discrimination for exercising your privacy rights. To exercise your California privacy rights, contact us at support@chatloom.app. We will respond to verifiable consumer requests within 45 days.

14. Brazilian Data Protection (LGPD)

If you are located in Brazil, you have rights under the Lei Geral de Protecao de Dados (LGPD). These include the right to: confirmation of processing; access to your data; correction of incomplete or inaccurate data; anonymization, blocking, or deletion of unnecessary data; data portability; information about third parties with whom data is shared; and the ability to revoke consent. To exercise your LGPD rights, contact our Data Protection Officer at support@chatloom.app.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform.

16. Contact Us