Privacy Policy

Effective July 11, 2026

Uber Media Labs ('ChatKindle', 'we', 'us'), based in Uttar Pradesh, India, operates the chatbot platform at chatkindle.com (the 'Service'). This Privacy Policy explains what we collect, why, how we use and share it, and the rights you have over your personal data — under the EU/UK General Data Protection Regulation (GDPR) where applicable, and India's Digital Personal Data Protection Act, 2023 (DPDP).

Important: when you chat with a ChatKindle bot embedded on a business’s website, that business is the data controller and ChatKindle is the processor — their privacy notice governs that relationship. This policy governs ours with you when you visit chatkindle.com or hold an account.

1. Information we collect

Information you provide

Account details: name, business name, email, phone, password (stored as a cryptographic hash, never plain text).
Billing details: plan choice and payment tokens — we never see or store raw card numbers; Razorpay and PayPal handle card data directly.
Content you upload to train your bot: website URLs, PDFs, FAQs, prompt text.
Support correspondence and feedback you send us.

Information collected automatically

Log data: IP address, browser, OS, referrer, timestamps — for security and abuse prevention.
Usage analytics: feature use, conversation counts, error events — to improve the product.
Cookies and similar technologies (see Section 7).

Information from third parties

Authentication providers (e.g. Google) if you sign in with them — we receive your email and profile photo.
Payment providers — transaction status, last-4 card digits, billing country.
Integrations you connect (Google Calendar, WhatsApp Business, etc.) — only the scopes you authorize.

2. How we use information

To provide, maintain, and improve the Service.
To process payments and manage subscriptions.
To send transactional emails (receipts, security alerts, and product updates you opted in to).
To detect and prevent fraud, abuse, and security incidents.
To comply with legal obligations and respond to lawful requests.

We do not sell personal information, and we do not use your bot’s training data, conversations, or knowledge base to train any general-purpose AI model. Inference is routed to LLM providers under contracts that forbid training on your data.

3. Legal bases (GDPR / UK GDPR)

Contract: to deliver the Service you signed up for.
Legitimate interest: to keep the Service secure, prevent abuse, and improve features.
Consent: for marketing emails and non-essential cookies — revocable at any time.
Legal obligation: tax, accounting, and responding to lawful authority.

4. Who we share data with

We share personal data only with processors needed to run the Service, and as required by law:

Hosting, database, authentication and storage: a self-hosted PostgreSQL/Supabase stack operated by Uber Media Labs on our own cloud infrastructure.
File and widget-asset delivery: Cloudflare R2 (CDN and object storage).
LLM inference and embeddings: OpenRouter and the underlying model providers (e.g. OpenAI, Anthropic, Google, Meta). No customer data is used for model training.
Email: Resend (transactional email).
Payments: Razorpay (INR) and PayPal (USD and other currencies).
Monitoring and analytics: PostHog (product analytics) and Sentry (error tracking), where enabled.
Integrations: only the third-party services you explicitly connect (Google Calendar, WhatsApp Business, etc.).
Legal and security disclosures: to comply with a court order or government request, or to investigate a credible security incident.

5. International transfers

ChatKindle is operated from India. If you access the Service from another country, your information may be transferred across borders. Where required, we rely on the European Commission’s Standard Contractual Clauses or equivalent transfer mechanisms. You can request details at privacy@chatkindle.com.

6. Data retention

Account data: life of the account plus 30 days after deletion.
Billing records: 7 years (statutory tax and accounting requirement).
Conversation transcripts: per the subscriber’s policy — default 365 days, configurable in the dashboard.
Logs and security events: 90 days.

You can request earlier deletion (Section 8); we honour it within 30 days unless a statutory retention obligation prevents it.

7. Cookies and similar technologies

We use a small set of cookies. None are used for cross-site advertising.

Strictly necessary: authentication session, CSRF token, locale and currency preferences. These cannot be disabled.
Analytics: PostHog (page views, feature usage), where enabled. Opt out via your browser’s Do Not Track or our cookie banner.
Anonymous visitor ID on subscriber sites: a randomly generated ID stored in the visitor’s browser so a chatbot conversation can resume across page loads. No personal identifiers, never shared across websites.

8. GDPR & DPDP rights

If you are in the EU/UK (under GDPR) or in India (under the DPDP Act, 2023), you have the right to:

Access — request a copy of the personal data we hold about you.
Rectify — correct inaccurate or incomplete data.
Erase — request deletion of your data (“right to be forgotten”).
Restrict or object — limit how we process your data, including for marketing.
Port — receive your data in a machine-readable format.
Withdraw consent — where processing is based on consent.
Complain — to your supervisory authority (your national data-protection authority in the EU, the ICO in the UK, or the Data Protection Board of India).

To exercise any of these rights, email privacy@chatkindle.com. We respond within 30 days (or sooner where the law requires).

9. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe we have, contact privacy@chatkindle.com and we will delete it.

10. Security

We protect personal data with TLS in transit, AES-256 at rest, row-level security on multi-tenant data, scoped service tokens, signed webhook delivery, and continuous monitoring. No system is perfect — if you discover a vulnerability, please report it to security@chatkindle.com; we welcome responsible disclosure.

11. Changes to this policy

We may update this policy from time to time. Material changes will be announced by email or an in-product notice at least 14 days before they take effect. Continued use of the Service after an update means you accept the new terms.

12. Contact

Uber Media Labs — Uttar Pradesh, India
Privacy and data-subject requests: privacy@chatkindle.com
Security disclosures: security@chatkindle.com
General support: support@chatkindle.com