Data processing agreement

This is not legal advice and has not had legal review. It is an accurate description of what the software actually does, written so that you and your counsel can see the shape of the processing. If you need an executed DPA, ask and we will work from this document — but do not treat the text below as one.

You are the controller of your visitors' personal data. We are a processor acting on your instructions, and the sub-processors listed below are our processors.

Visitor messages and any email address a visitor chooses to leave, for the sole purpose of answering their question and passing it to you when we cannot. A random per-browser visitor id so a conversation survives a page reload.

Google (Gemini API — embeddings and answer generation), Resend (transactional email), Twilio (SMS notifications to you), Lemon Squeezy (our merchant of record for payments; we never see card details), Vercel (hosting) and Neon (database). We will give notice before adding a sub-processor that touches visitor data.

Every tenant query is scoped to your organization in the database query itself rather than filtered afterwards, and that property is enforced by an automated test that fails the build if a new endpoint is added without it. Data is encrypted in transit. Retrieved content and visitor messages are fenced as data in every model prompt so that neither can act as an instruction.

Export returns everything we hold for your organization as JSON. Deletion takes effect immediately and permanently destroys the underlying rows after a seven-day window during which an accidental deletion can be undone. Both are self-service; neither requires contacting us. The undo is self-service only from the same browser session that deleted the organization — a deleted organization cannot sign back in, so if you have closed that tab or signed out, ask us within the seven days and we will restore it.

We keep data for as long as your organization exists. There is currently no automatic retention limit on conversations — if you need one, that is a real gap and worth telling us about.