ITS Ross LLC ("we", "us", "our") operates the Chatly.today platform. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password. If you sign up through Google, we receive your name and email from Google's authentication service.

Site and Business Data

You may provide your website URL, business name, and description. We may automatically analyze your website to populate your business profile (domain analysis). This data is used to personalize your AI chat assistant.

Chat Messages

When visitors chat with your AI assistant, we collect the messages exchanged between visitors and the AI. This includes visitor-provided information such as name, email, and any details shared in conversation. You are the data controller for your visitors' data — we process it on your behalf.

Knowledge Base Content

Documents and URLs you add to your knowledge base are processed and stored to train your AI assistant. This content is used solely for your chat widget.

Usage Data

We collect standard server logs including IP addresses, browser type, and pages visited to maintain service quality and security.

2. How We Use Your Information

To provide and operate the Chatly.today platform
To power AI chat responses using your knowledge base and business profile
To deliver chat transcripts and notifications to your inbox
To send transactional emails (welcome messages, notifications, password resets)
To process billing through Stripe
To improve our services and fix bugs

3. AI Processing

Chatly.today uses Amazon Bedrock (powered by Anthropic Claude and Amazon Nova models) to generate AI chat responses. When AI processes your data:

Visitor messages, your knowledge base, and business profile are sent to Amazon Bedrock to generate responses
Chat history is stored in your workspace and can be viewed or deleted
Amazon Bedrock does not use your data to train its models
AI responses are generated in real-time and are not guaranteed to be accurate

4. Data Storage and Security

All data is stored in Amazon Web Services (AWS) infrastructure in the US East (N. Virginia) region. We use the following AWS services:

Amazon DynamoDB — primary database for all account, chat, and contact data
Amazon S3 — storage for knowledge base documents and assets
Amazon Cognito — authentication and identity management
Amazon SES — transactional email delivery
AWS Lambda — serverless compute for API and WebSocket processing

Data is encrypted in transit (TLS/WSS) and at rest (AWS-managed encryption keys). WebSocket connections used for real-time chat are secured with WSS (TLS). Access to production systems is restricted to authorized personnel only.

5. Data Sharing

We do not sell your personal data. We share data only with:

Amazon Web Services — infrastructure provider (data processing agreement in place)
Stripe — payment processing (only billing-related data)

We may disclose data if required by law or to protect the safety and security of our users and platform.

6. Chat Widget and Visitor Data

When you embed the Chatly.today widget on your website, visitor interactions are processed through our servers. Specifically:

Chat messages are transmitted via secure WebSocket connections
Visitor browser information (user agent) is collected for device identification
A first-party cookie (complens_vid) is set on your visitors' browsers so the AI can resume a conversation after a page refresh. This is a strictly-necessary functional cookie and does not track visitors across unrelated sites.
You are responsible for disclosing the presence of the chat widget and thecomplens_vid cookie in your own privacy policy

7. Your Rights

You have the right to:

Access your data — all your data is visible in your Chatly.today dashboard
Export your chat transcripts and contacts
Delete your account and all associated data by contacting us
Correct inaccurate data through your account settings

If you are located in the European Economic Area (EEA), you have additional rights under GDPR including the right to data portability and the right to lodge a complaint with your local data protection authority.

8. Data Retention

We retain your data for as long as your account is active. Chat histories are retained indefinitely unless you delete them. If you delete your account, we will delete your data within 30 days, except where required by law. Server logs are retained for 90 days.

9. Cookies

We use a small number of first-party cookies, grouped into two categories:

Essential — required for the service to work. Includes Amazon Cognito authentication tokens, complens_vid (chat session continuity), andcomplens_consent (remembers your cookie preference). These are always set.
Analytics — Google Analytics (_ga, _ga_*), used to understand aggregate usage and improve Chatly. These are only loaded if you click Accept in the cookie banner, and are never loaded if you decline.

We do not use advertising or retargeting cookies.

10. Children's Privacy

Chatly.today is not directed at children under 13. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or through the platform. Continued use after changes constitutes acceptance.

12. Contact

For privacy-related questions or requests, contact us at:

ITS Ross LLC
Email: privacy@chatly.today
Arizona, United States