Privacy Policy

1. Introduction

ChatFlow ("we", "our", "the Company") is committed to protecting your privacy. This Privacy Policy ("the Policy") explains how we collect, use, disclose, and protect your information when you visit our website www.chatflow.co.il, or use our platform to build and manage chatbots ("the Services"). This policy applies to information we collect from visitors to the site and from our registered users ("customers", "you").

2. Our Role as Data Processor and Data Controller

It is important to distinguish between two roles we fulfill:
a. As Data Controller: When we collect information directly from you for the purpose of managing your account, billing, and marketing (for example, registration details and contact information), we act as the data controller of this information.
b. As Data Processor: When you use our services to build a chatbot, you are the data controller of all information and conversations with your end users ("conversation data"). In this case, we act as data processors and process this data on your behalf and in accordance with your instructions and terms of use. This policy focuses primarily on our role as data controller.

3. Information We Collect

We collect several types of information:
a. Information you provide to us:

• Account details: When registering, we collect personal information such as your name, email address, company name, and password.
• Billing details: When purchasing a subscription, we (or our payment service provider) collect payment information, but we do not store the full credit card number.
• Communication: We store information when you contact us, for example through a contact form, email, or support requests.

b. Automatically collected information:

• Usage data and logs: We collect information about how you use the services, including IP address, browser type, operating system, pages viewed, timestamps, and actions you perform on the platform.
• Cookies and similar technologies: We use cookies to enable and improve services, analyze performance, and personalize your experience. For more information, see the "Cookies" section below.

 

4. How We Use Your Information

The information we collect is used for the following purposes:

• To provide, operate, maintain, and secure our services.
• To manage your account, including processing payments and sending invoices.
• To send you technical updates, security alerts, and administrative messages.
• To respond to your inquiries and provide customer support.
• To improve, personalize, and expand our services based on trend analysis and usage.
• To develop new products, services, and features.
• To send you marketing emails (subject to your consent, with easy opt-out option).
• To comply with legal obligations and prevent fraud.

 

5. Legal Basis for Processing Information

We process personal information based on several legal grounds:

• Contract performance: Processing required to provide you with the services we committed to in the terms of use.
• Legitimate interests: When processing is necessary for our legitimate interests (such as service improvement, security, and direct marketing), provided that your rights do not override them.
• Consent: When we have requested your explicit consent for processing, for example for sending newsletters or using non-essential cookies.
• Legal obligation: When we are required to process information to comply with legal requirements.

 

6. Sharing and Disclosure of Information

We do not sell or rent your personal information. We may share information with third parties only in the following situations:

• Service providers: We share information with companies that provide us with services, such as cloud hosting providers (e.g., AWS), payment service providers (e.g., Stripe), and analytics tools (e.g., Google Analytics), which are committed to maintaining the confidentiality of information.
• Legal requirement: If required by law, court order, or other legal process.
• Business transfer: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
• With your consent: We may share information with other parties subject to your explicit consent.

We emphasize that we will never share your end users' conversation data with a third party, unless required by law or by explicit instruction from you.

 

7. Data Retention

We retain your personal information for as long as necessary to provide services, meet our legal obligations, resolve disputes, and enforce our agreements. Account data will be retained as long as your account is active, and for a short period thereafter. Conversation data will be retained according to your subscription plan and settings.

8. Information Security

We take reasonable technical and organizational security measures to protect your information from unauthorized access, use, modification, or destruction. These measures include encryption of data in transit (SSL/TLS) and at rest, strict access controls, and ongoing system monitoring. However, no system is 100% secure, and we cannot guarantee absolute security.

9. Cookies and Tracking Technologies

A "Cookie" is a small text file stored on your device. We use essential cookies for website operation (such as session management), analytics and performance cookies (to understand how the site is used), and functional cookies (to remember your preferences). You can control the use of cookies through your browser settings, but note that blocking them may impair your user experience.

10. Your Data Protection Rights

Subject to applicable law, you have several rights regarding your personal information, including:

• The right to access your personal information.
• The right to request correction of inaccurate information.
• The right to request deletion of your information ("right to be forgotten").
• The right to object to processing of your information for certain purposes.
• The right to request restriction of processing of information.

To exercise your rights, please contact us using the details provided below.

 

11. Children's Privacy

Our services are not intended for children under the age of 18, and we do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will remove this information.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the new policy on this site and/or via email. We recommend that you review this policy periodically.

13. Contact

For any questions, requests, or comments regarding this privacy policy, please contact us by email: This email address is being protected from spambots. You need JavaScript enabled to view it..