Privacy Policy

1) Scope

This Policy explains how we handle personal information for:

• Organization users (e.g., admins, chatbot builders, staff)
• End users who interact with chatbots created through GoDialog
• Website and platform users who create and manage dialog trees

2) Information We Collect

We practice data minimization and collect only what is necessary.

Account & Authentication

• Email address
• Encrypted password hash (bcrypt)
• Account verification status

Messaging Platform Data

• Name and basic profile (when provided by messaging platforms)
• Phone number or messaging platform identifier (e.g., WhatsApp number, Telegram ID)
• Messages exchanged in conversations with chatbots
• Conversation metadata (timestamps, delivery status)
• User preferences and language settings

Business & Operations

• Billing contact information
• Payment terms and payment processor references/IDs
• Client-created chatbot content and dialog trees
• File attachments shared in conversations (e.g., images, documents, media)

Session Security

• Temporary authentication tokens
• Password reset and account verification tokens (time-limited)

We do NOT collect

• IP address tracking or device fingerprinting
• GPS/location data
• Web browsing behavior for advertising
• Government IDs or Social Security Numbers
• Unnecessary personal information

3) How We Use Information

• Provide and secure the service: authenticate users, manage roles, authorize access
• Deliver messaging experiences: process and route messages; manage conversation flows; deliver chatbot responses via integrated platforms (e.g., WhatsApp, Telegram)
• Support & operations: respond to support requests; manage billing and subscriptions
• Analytics & improvement: measure conversation engagement and chatbot performance to improve effectiveness (not for ads; no sale of personal data)

4) Client Content & Chatbot Creation

Organizations create dialog trees and conversational flows through GoDialog. Chatac processes this content to deliver automated conversations to end users. Client content remains the client's intellectual property; we host and process it solely to provide the service under the client's instructions.

5) Legal Bases

We process personal information based on:

• Contract (to provide the service to clients and their users)
• Legitimate interests (service security, quality, analytics for improvement)
• Consent where required (e.g., certain communications or processing requested by the client)

6) End User Data

GoDialog processes messages and conversation data on behalf of organizations that use our platform. Organizations are responsible for obtaining appropriate consents/authorizations from their end users and for complying with applicable privacy laws. We process such data strictly as a processor on the organization's instructions.

7) Security

• Industry-standard encryption for data in transit (HTTPS/TLS)
• Encrypted password storage (bcrypt)
• Role-based access controls; least-privilege administration
• Hosting on enterprise-grade infrastructure (e.g., Heroku/Salesforce with SOC 2/ISO 27001-compliant environment; AWS S3 encrypted storage)
• Limited production access for authorized personnel only
• Temporary security tokens with automatic expiration

8) Data Retention & Deletion

We retain personal information only as long as necessary to provide the service and meet legal/contractual obligations. Organizations may request export or deletion of their data; individuals can request deletion through their organization or by contacting us (see §11). Temporary tokens and reset links expire automatically.

9) Cookies & Tracking

We do not use cookies or similar technologies for advertising or cross-site tracking. Any strictly necessary cookies (if used) are only for secure login/session management.

10) Changes to This Policy

We may update this Policy to reflect operational or legal changes. We will post the updated Policy with a new effective date and, where legally required, notify you.

11) Contact Us

For questions or requests about this Policy or your data: