Privacy Policy for CHBOCO
1. Introduction
Welcome to CHBOCO. We specialize in developing chatbots tailored to enhance interaction and engagement for companies. This Privacy Policy outlines our practices regarding the collection, use, protection, and sharing of information obtained through our services.
2. Information Collection
We collect information necessary to provide and enhance our services, which may include:
- Logs and usage data, including user messages when required by chatbot specifications.
- Technical information about interactions with our chatbots.
- Cookies and similar technologies to identify users of the chatbots.
3. Use of Information
We use the collected information to:
- Enhance and personalize the chatbot experience.
- Develop and improve our offerings.
- Analyze user interactions for service enhancement.
4. Data Sharing
Information may be shared with:
- Language model providers. A chatbot’s replies are produced by a language model that we do not run ourselves. To produce a reply, the messages exchanged in that conversation are sent to a third-party model provider. The same applies to documents uploaded to a chatbot’s knowledge base: their text is sent to a provider to be indexed so the chatbot can search it. We name the providers in use on request — see Contact Us — rather than here, because which model a chatbot runs on can change.
- Payment processors. Card details are entered with our payment processor and never reach us.
- Infrastructure providers. The servers and storage our services run on.
- Contractors who assist in our business operations, under strict privacy standards.
- Legal authorities if required by law.
We do not sell personal information, and we do not share it for advertising.
5. Access by CHBOCO Staff
A small, named group of CHBOCO personnel — our platform administrators — can open the operator pages of any chatbot on the platform, including one belonging to a customer whose organization they are not a member of. Those pages show the chatbot’s conversations, which means the messages end users have sent to it.
We are telling you this plainly because it is true of the system, not of our intentions, and a policy that omitted it would be inaccurate:
- Who. The list is maintained in our deployment configuration, so adding or removing somebody is a deliberate, recorded change rather than a setting in an admin screen. It is kept as short as operating the service allows.
- Why. Supporting a customer who asks us for help, diagnosing a chatbot that is misbehaving, and investigating abuse or a security report.
- What is recorded. Every such sign-in is written to our service logs, identifying the staff member, the chatbot and the organization, and is recorded distinctly from a customer’s own sign-in. Those logs are retained for as long as our operational logs generally are; they are not a permanent audit trail and we do not currently offer customers a report of them.
- What this is not. Staff access is not used to read conversations for product analytics, to train models, or for any purpose in section 3. We do not sell or share what is seen this way.
Separately and more narrowly, our billing system counts rows — how many
messages and how many model calls a chatbot has handled — in order to show usage
and to bill for it. That counting runs under a database account that is granted
nothing but SELECT on the two tables it counts, and the queries read only the
number of rows, never the text of a message.
If you need a contractual commitment narrower than the above — for example that no CHBOCO person may open your chatbot without your prior approval in each instance — contact us; it is a question about how we run the service, not about this policy.
6. Data Security
We implement security measures to protect against unauthorized access, alteration, and destruction of user information.
7. Cookies and Tracking Technologies
Cookies help us recognize users and their preferences. Users can control cookies through their browser settings.
8. Children’s Privacy
Our services are not intended for children under 13, and we do not knowingly collect their data.
9. Changes to This Privacy Policy
We may update this policy periodically and will notify users of any significant changes.
10. Contact Us
For questions about this policy, contact us at al.badretdinov@gmail.com.