Privacy Policy

Last updated: March 30, 2026

1. Introduction

[COMPANY_NAME] (“we”, “us”, “our”) operates Savoy AI. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.

2. Information We Collect

Account information: When you sign up, we collect your name, email address, company name (if provided), and password (stored in hashed form).

Website content: We crawl and store the content of the website(s) you register with the Service. This content is used to generate embeddings that power your chatbot.

Chat logs: We store conversations between your site visitors and the AI chatbot, including the questions asked and responses generated.

Usage analytics: We collect data about how you and your site visitors interact with the Service, including page views, chat volume, and feature usage.

Billing information: Payment details (credit/debit card) are collected and processed by our payment provider, Stripe. We do not store your full card number on our servers.

3. How We Use Your Information

• To provide the Service: We use your website content to generate chatbot responses for your visitors.
• To operate and maintain accounts: We use your account information to authenticate you and manage your subscription.
• To improve the Service: We use usage analytics and chat logs to understand how the Service is used and to make improvements.
• To communicate with you: We may send you service-related emails such as billing confirmations, security alerts, and product updates.

4. Third-Party Services

We share data with the following third-party providers as necessary to operate the Service:

• OpenAI — We send website content and chat messages to OpenAI’s API to generate embeddings and chatbot responses.
• Stripe — We use Stripe to process subscription payments. Stripe receives your billing information directly.
• Render — Our application infrastructure is hosted on Render.

We do not sell your personal information to third parties.

5. Cookies

We use session cookies for authentication purposes. These cookies are essential for the Service to function and allow you to stay signed in. We do not use third-party tracking cookies or advertising cookies.

6. Data Retention

We retain your account data and website content for as long as your account is active. Chat logs are retained for 12 months to support analytics and service improvement. If you cancel your account, we will delete your data within 30 days of the end of your billing period. You may request earlier deletion by contacting us.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Object to certain types of processing

To exercise any of these rights, contact us at [COMPANY_EMAIL].

8. GDPR (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your data is: (a) performance of a contract (providing the Service you signed up for), (b) legitimate interest (improving the Service and ensuring security), and (c) consent where required. You may contact your local data protection authority if you have concerns about our data practices.

9. CCPA (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information. To make a request, contact us at [COMPANY_EMAIL].

10. Security

We take reasonable measures to protect your data, including encryption in transit (TLS), hashed passwords, and access controls on our infrastructure. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice within the Service. Continued use after changes take effect constitutes acceptance of the revised policy.

12. Contact

If you have questions about this Privacy Policy, contact us at:
[COMPANY_EMAIL]