This policy explains what information CreateYourChat ("we", "us") collects when you use createyourchat.com, how we use it, and the choices you have. If you have questions, email support@createyourchat.com.
Two kinds of people use our service
- Customers create an account and build chatbots.
- Visitors chat with a customer's published chatbot, on our site or on the customer's website. The customer decides what the chatbot knows and how long its conversations are kept.
Information we collect
From customers
- Account details: your name and email address, and your password stored as a secure one-way hash (we cannot read it). If you sign in with Google, Google sends us your name, email address and Google account ID; we never see your Google password.
- Knowledge you add: text, FAQs, uploaded files, and the content of web pages you ask us to read, plus the text we extract from them and search data derived from that text.
- Material for AI-written FAQs: when you create FAQs with AI, the file, web page or text you choose is read once to write draft questions. Uploaded files and pasted text are deleted when that is done; we keep the drafts, the file name or web address, and the result until you delete them.
- Chatbot settings: names, instructions, appearance and similar settings.
- Usage records: counts of messages and AI processing used, for plan limits.
- Support messages: when you use the support form, your name, email address, topic and message are emailed to our support inbox so we can reply.
- Security records: sign-ins, important account changes and the IP address used, kept to protect your account.
From visitors
- Conversations: the questions asked and the answers given.
- Forms in the chat: a customer can add a form to their chatbot (for example to request a call back). What a visitor types into it, such as a name, email address or phone number, is saved for that customer, who can view, edit, export and delete it. Filling in a form is always optional, and visitors can keep chatting without it. Form answers are not used to answer questions or to train AI models. If the customer turns it on, the answers are also included in an email to the customer.
- Apart from such forms, we do not ask visitors for their name or email, and we do not store visitors' IP addresses with conversations. IP addresses are used briefly to prevent abuse (rate limiting) and are deleted within two days. A scrambled (hashed) value derived from the IP address may be stored with a conversation to help detect abuse.
Cookies and browser storage
- Signed-in customers get one session cookie that keeps them signed in. It is required for the service to work.
- Visitors chatting with a chatbot get no cookies from us. The chat stores a conversation reference in the browser tab's temporary storage (sessionStorage) so a page reload keeps the conversation. It is cleared when the tab is closed.
- We do not use advertising or third-party tracking cookies.
How we use information
- To run the service: read your knowledge, answer visitors' questions, show you conversations and usage.
- To keep the service secure and prevent abuse.
- To send you account emails, such as email verification and password resets.
We do not sell personal information, and we do not use your knowledge or conversations to advertise to you.
Service providers
- Cloudflare Turnstile checks that a person, not an automated program, is using the sign-up, password reset and support forms. Cloudflare receives technical information from your browser (such as your IP address and browser signals) for this check; see Cloudflare's privacy policy for details.
- OpenAI processes text on our behalf: the text of your knowledge (to make it searchable) and, when a question is asked, the question, recent conversation turns and the relevant parts of your knowledge (to write the answer); and, when you create FAQs with AI, the text of the file, web page or pasted text you chose (to write draft questions). OpenAI states that data sent through its API is not used to train its models by default; see OpenAI's own policies for details.
- Our hosting provider runs the servers where your data is stored.
How long we keep information
- Visitor conversations: for the period the customer chooses for each chatbot (30 days, 90 days, 1 year by default, or until deleted). Test conversations: 30 days.
- Form submissions: until the customer deletes them (or the chatbot or account); they are not removed with the conversation. Answers to a form that was started but not sent are deleted after 24 hours without activity.
- Knowledge and chatbots: until the customer deletes them or their account.
- Account details: until you delete your account.
- Application logs (technical events, no message contents): up to 30 days.
- Backups: nightly backups are kept for up to 14 days and are then replaced, so deleted data can remain in a backup for up to 14 days.
Your choices
- Customers can view, change and delete their knowledge, conversations and chatbots at any time, and delete their account from Account → Privacy and data.
- Visitors who want a conversation removed can contact the organization that runs the chatbot, or email us with the chatbot's address and the approximate time of the conversation.
- For any other request about your information, email support@createyourchat.com.
Security
We use HTTPS for all traffic, keep uploaded files outside the public website, separate each customer's data, and limit access to our systems. No system is perfectly secure, so we cannot guarantee absolute security.
Sensitive information
Please do not add sensitive personal information (such as health records, financial account numbers or government ID numbers) to a chatbot's knowledge, and do not use the service in a way that requires visitors to share such information.
Children
Our service is not directed at children under 13, and customers must be at least 18.
Changes
We may update this policy. We will change the "Last updated" date and, for significant changes, notify customers by email or in the app.
Last updated: November 2, 2026