Privacy Policy

1. Introduction

ChatNest ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI chatbot platform.

By using ChatNest, you agree to the data practices described in this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address - for account access and communication
• Password - encrypted and securely stored
• Name - to personalize your experience
• Company name (optional) - for organization identification

2.2 Payment Information

When you subscribe to a paid plan:

• Billing details - processed securely through Stripe
• Payment method - stored by Stripe, not on our servers
• Transaction history - for billing and account management

We do not store your credit card information. All payment processing is handled by Stripe, a PCI-DSS compliant payment processor.

2.3 Content You Upload

To train your chatbots, you may upload:

• Documents - PDF, DOCX, DOC, and TXT files (up to 2MB-50MB depending on plan)
• Website URLs - for content extraction

2.4 Usage Information

We automatically collect:

• Device information - IP address, browser type, operating system
• Usage data - features used, pages visited, session duration
• Bot analytics - chat counts, response times, credit usage
• Error logs - for debugging and service improvement

3. How We Use Your Information

3.1 To Provide Our Service

• Create and manage your account
• Process your documents and generate chatbot responses
• Handle payments and manage subscriptions
• Track credit usage and enforce plan limits
• Provide customer support

3.2 To Communicate With You

• Send account verification emails
• Process password reset requests
• Send payment receipts and billing notifications
• Respond to your support requests
• Send important service updates

3.3 To Improve Our Service

• Analyze usage patterns to improve features
• Monitor system performance and errors
• Develop new features based on user needs

3.4 For Security

• Detect and prevent fraud and abuse
• Ensure service security and integrity
• Comply with legal obligations

4. AI and Content Processing

4.1 How We Process Your Content

When you upload documents or create chatbots:

• Your content is analyzed and indexed for retrieval
• AI models process your content to generate responses
• Processed data is stored securely on our servers

4.2 Third-Party AI Providers

We use the following AI model providers to power chatbot responses:

• OpenAI (GPT-4.1, GPT-4.1 Mini, GPT-5, GPT-5 Mini, GPT-5 Nano)
• Anthropic (Claude 4.5 Opus, Sonnet, Haiku)
• Google (Gemini 2.5 Pro, Flash, Flash Lite, Gemini 3 Pro)

Your content may be sent to these providers to generate responses. We have agreements with these providers to ensure your data is handled securely.

4.3 Model Training

We do not use your uploaded content or conversations to train AI models. Your data remains private and is used solely to provide our service to you.

5. How We Share Your Information

5.1 Service Providers

We share data with third-party services that help us operate:

• Stripe - for payment processing
• OpenAI, Anthropic, Google - for AI model access
• Amazon Web Services (AWS) - for cloud hosting, file storage (S3), and transactional emails (SES)
• Pinecone - for vector database storage
• Google Analytics - for website analytics
• Microsoft Clarity - for user behavior analytics

5.2 Legal Requirements

We may disclose information if required by law or to:

• Comply with legal obligations or court orders
• Protect our rights and safety
• Prevent fraud or abuse

5.3 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Security

We implement industry-standard security measures:

• Encryption - Data encrypted in transit (HTTPS/TLS)
• Secure storage - Encrypted database storage
• Access controls - Authentication required for all actions
• Regular updates - Security patches applied promptly

While we use best practices to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information as follows:

• Active accounts - Data retained while your account is active
• After deletion - Personal data deleted within 30 days
• Backups - May be retained for up to 90 days
• Legal requirements - Some data retained longer if required by law

8. Your Privacy Rights

You have the right to:

• Access - Request a copy of your personal data
• Correction - Update inaccurate information
• Deletion - Delete your account and data
• Export - Download your data
• Opt-out - Unsubscribe from marketing emails

To exercise these rights, contact us at support@chatnest.co

9. Cookies and Analytics

9.1 Essential Cookies

We use essential cookies for:

• Authentication and session management
• Remembering your preferences
• Basic functionality of the service

9.2 Analytics

We use analytics services to understand how users interact with our platform:

• Google Analytics - to measure website traffic, user behavior, and marketing effectiveness
• Microsoft Clarity - to analyze user sessions, heatmaps, and identify usability issues

You can control cookies through your browser settings, but this may affect service functionality.

10. Children's Privacy

Our service is not intended for users under 18. We do not knowingly collect information from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy occasionally. When we do:

• The "Last updated" date will change
• We'll notify you of material changes via email
• Continued use constitutes acceptance of changes

12. Contact Us

Questions about this Privacy Policy? Contact us: