Privacy Notice

Last updated: 5/5/2026

1. Who we are

TinyBot ("TinyBot", "we") operates Chatly. We act as the data controller for personal data collected through the Service.

2. Data we collect

• Account data: name, email, login credentials.
• Bot & content data: website URLs, scraped knowledge-base content, bot configuration.
• Support data: messages you send to support.
• Usage & telemetry: feature usage, log events, device identifiers, IP address.
• End-visitor data: chat transcripts and any leads (name, email, phone) submitted by visitors of websites running Chatly.

3. Purposes & legal bases

• Creating and operating your account — performance of contract.
• Providing the Service (training bots, capturing leads, sending notifications) — performance of contract.
• Security, fraud prevention, abuse detection — legitimate interests.
• Product improvement and analytics — legitimate interests.
• Customer support — performance of contract / legitimate interests.
• Marketing communications — consent (where required); you may opt out at any time.
• Legal/regulatory compliance — legal obligation.

4. Data sharing

We share personal data with:

• Service providers / subprocessors for hosting, database, email delivery, analytics, and AI inference.
• Paddle, our Merchant of Record, for sale of subscriptions, payments, subscription management, tax compliance, and invoicing.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

5. International transfers

Where personal data is transferred outside the UK/EEA we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

We retain personal data only as long as needed for the purposes above, to comply with legal obligations, or to resolve disputes. Account data is deleted or anonymised after account closure (typically within 90 days), except where longer retention is required by law.

7. Your rights

Subject to applicable law you may have the right to access, rectify, erase, restrict, or port your personal data; to object to processing; to withdraw consent; and to complain to your supervisory authority. We respond within one month. Contact us through the support channels in your dashboard to exercise these rights.

8. Security

We use appropriate technical and organisational measures including encryption in transit, access controls, and least-privilege database policies.

9. Cookies

We use essential cookies required to operate the Service (e.g. authentication) and may use analytics cookies to understand usage. You can manage cookie preferences through your browser settings.

10. Contact

For privacy questions, contact TinyBot via the support channels in your dashboard.

← Back to home