Privacy Policy

How we collect, use, and protect personal data for visitors, customers, and end users of the TalktoWin chatbot.

This Privacy Policy explains how TalktoWin ("TalktoWin", "we", "us", or "our") collects, uses, and protects personal data when you visit our website or landing pages, use the TalktoWin chatbot on a website that has integrated our service, or use TalktoWin as a customer.

You visit our website or landing pages.
You use the TalktoWin chatbot on a website that has integrated our service.
You use TalktoWin as a customer (for example, as a store owner or administrator).

By using our services, you agree to the practices described in this Privacy Policy.

Who Is Who?

Updated

Customer: the business or individual who integrates the TalktoWin chatbot on their website or store (for example, a Shopify or WooCommerce shop).
End User: the person who interacts with the chatbot on the Customer's website.
Visitor: the person who visits our own website (for example, talktowin.app).
TalktoWin provides the chatbot infrastructure. The Customer is responsible for how they use our service, what content they provide to the chatbot, and for verifying that AI answers are appropriate for their End Users.

Information We Collect

Updated

Data from End Users: a session-based identifier (GUID), chat or questionnaire messages and responses, time-related information (such as interaction duration), optional email address with explicit consent, device/browser information, and IP address with approximate country/region. This data is processed primarily on behalf of the Customer so they can support users, analyze performance, and improve their business.
Data from Customers and Visitors: name and contact details, account and login information, store or website details (URL, platform type), configuration and content provided to the chatbot (FAQs, products, policies), technical data (IP address, device/browser info, usage logs), and communication history with us. When paid plans launch, billing-related information (such as payment transaction details) may be collected from you or from our payment provider.

Legal Basis and Purposes for Data Processing

Updated

Provide and operate our services (running the chatbot, storing and displaying chat conversations): legal basis is performance of a contract and legitimate interest.
Improve and develop the service (analyzing usage patterns, debugging, troubleshooting, enhancing features): legal basis is legitimate interest.
Communicate with you (support responses, important service notices, product updates or marketing only with explicit consent such as newsletter opt-in): legal basis is consent and legitimate interest.
Comply with legal obligations (keeping records where required by law, responding to lawful requests from authorities): legal basis is legal obligation.
For End Users of our Customers, we usually act as a data processor and process data on behalf of the Customer, who is responsible for the legal basis.

Cookies and Similar Technologies

Updated

We may use cookies or similar technologies to store a session-based unique identifier (GUID), track your progress during a question or chat flow, and remember preferences during a session.
The cookie we set for the question or chat flow does not itself contain personal data like your name or email and is used to link your session to your activity.
Where required by law, we only set cookies after you give consent (for example, via a cookie banner or clear notice). You can manage or delete cookies in your browser settings, but some features may not work correctly without them.

Data Retention

Updated

We retain personal data only for as long as necessary to provide our services, fulfill the purposes described in this policy, or comply with legal obligations.
Session identifiers and chat logs may be stored while the Customer keeps using our service and for a reasonable period afterward for backup and security purposes.
Email addresses and contact data are retained until you request deletion or until they are no longer needed for the original purpose.
You may contact us at hello@talktowin.app to request deletion of your data. We will process deletion requests within 30 days unless we are legally required to retain certain information.

Data Access and Security

Updated

Access to personal data is restricted to authorized TalktoWin personnel who need it to operate, develop, or support the service.
We use industry-standard security measures such as encryption in transit (HTTPS), access control and authentication, and regular updates and basic security reviews.
No method of electronic transmission or storage is completely secure; we take reasonable steps to protect your data but cannot guarantee absolute security.

Third-Party Services and AI Providers

Updated

We may use third-party services such as cloud hosting providers, analytics services, email and communication tools, and third-party AI model providers that process chat content to generate AI responses.
These providers process data according to their own privacy policies and under contracts with us. We do not sell your personal data.
When you use TalktoWin on a Customer's website, the Customer may also use their own third-party tools (for example, analytics, CRM, or email systems). We are not responsible for their data practices.

Responsibilities of Customers (Site Owners)

Updated

You are responsible for the content you provide to the chatbot (such as FAQs, policies, product descriptions) and for configuring and testing the chatbot, including reviewing AI-generated answers.
You are responsible for informing your users about how their data is processed and for complying with applicable laws (for example, privacy notices, cookie banners, and consent where required).
You should not rely on the chatbot for legal, medical, financial, or other high-risk advice without appropriate human review. TalktoWin provides infrastructure and tools, but you remain responsible for how you use our service and for the information presented to your End Users.

AI-Generated Answers and Limitation of Responsibility

Updated

TalktoWin uses AI to generate some chatbot responses, which may be incomplete, outdated, or inaccurate and should not be treated as professional advice (legal, medical, financial, etc.).
Customers must test the chatbot and regularly check that it works correctly for their use case before relying on it.
To the maximum extent permitted by law, TalktoWin is not responsible for decisions made by Customers or End Users based on AI-generated answers and does not guarantee the accuracy, completeness, or suitability of any AI-generated content.

Your Rights

Updated

Depending on your location and applicable law (for example, under the GDPR), you may have the right to access, correct, delete, withdraw consent, object to certain processing (such as direct marketing), or request data portability.
To exercise these rights, contact us at hello@talktowin.app. We may need to verify your identity before processing your request and aim to respond within 30 days where legally required.
If we process your data as a processor on behalf of a Customer, we may ask you to contact that Customer directly because they are the primary controller of your data.

Children's Privacy

Updated

Our services are not directed at children under the age at which they can legally give consent to data processing in their country.
We do not knowingly collect personal data from children. If you believe that a child has provided personal data to us without appropriate consent, please contact hello@talktowin.app and we will take steps to delete it.

Limitation of Liability

Updated

To the maximum extent permitted by law, TalktoWin shall not be liable for any indirect, incidental, special, or consequential damages; any loss of profits, revenues, or data; or any harm resulting from the use of or reliance on AI-generated answers or from the Customer's configuration and content.
This applies regardless of the cause (including security incidents or data breaches), to the extent permitted by applicable law.

International Data Transfers

Updated

We may process and store data in countries other than the one where you are located. Where required by law, we will take appropriate steps to ensure that international transfers are subject to adequate safeguards (for example, using standard contractual clauses).

Changes to This Policy

Updated

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by updating the Effective Date at the top of this page and showing a prominent notice on our website and/or sending an email if you have provided your address.
Your continued use of our services after an update means you accept the revised Privacy Policy.

Contact Us

Updated

Email: hello@talktowin.app
If you have any questions about this Privacy Policy, how we handle personal data, or if you want to exercise your rights, you can contact us at this address. We will do our best to respond promptly.