Privacy Policy

DRAFT — PLACEHOLDER. This text is a structural placeholder pending legal review. It is not yet binding.

Last updated: 26 June 2026

1. Who We Are

TidyChat ("we", "us") operates the TidyChat Service. This Privacy Policy explains how we collect, use, and protect personal data.

2. Data We Collect

Account data — name, email, and authentication details of workspace members.
Customer data — contacts, messages, and lead records you bring into your workspace. You are the controller of this data; we process it on your behalf.
Usage data — logs and metrics needed to operate and secure the Service.

3. How We Use Data

We use personal data to provide the Service, secure it against abuse, comply with legal obligations, and communicate with you about your account.

4. Legal Bases

Where the GDPR applies, we rely on contract performance, legitimate interests, consent, and legal obligation as appropriate.

5. Sharing

We share data with sub-processors strictly to operate the Service (hosting, messaging gateways, payment processing). We do not sell personal data.

6. International Transfers

Where data is transferred across borders, we rely on appropriate safeguards such as Standard Contractual Clauses.

7. Retention

We retain personal data for as long as your workspace is active and as required to meet legal obligations, then delete or anonymise it.

8. Your Rights

Subject to applicable law (including the GDPR and the Israeli Protection of Privacy Law), you may request access, correction, deletion, or export of your personal data.

9. Security

We apply technical and organisational measures including encryption in transit, per-workspace isolation, and audit logging.

10. AI Processing

The assistant bot uses an AI sub-processor (OpenAI) to generate replies. Message content is sent to that provider solely to produce a response and, per the provider's API data-usage policy, is not used to train its models. A human handoff is always available so a member of your team can take over. See our Sub-processor list for the providers involved.

11. Contact

Privacy questions can be sent to [email protected].