This Privacy Policy explains how Chatworthy AI ("Chatworthy", "we", "us") collects, uses, and protects information when you use our AI agent platform, our website at chatworthy.ai, and any chat widget powered by Chatworthy that you encounter on a customer's website ("the Services").
Chatworthy is a product of AI Discovery Group. We are based in the United States.
Chatworthy has two distinct types of users, and this policy treats them differently:
We do not place tracking cookies on End Users through the widget. We do not build advertising profiles. The chat conversation is stored to enable the Customer to review and respond, and to retrain the agent on what its own customers actually ask.
We do not sell personal information. We do not use End User chat content for advertising. We do not allow third parties to advertise to End Users through our Services.
To generate agent replies, Chatworthy may send conversation content to contracted artificial intelligence service providers under commercial API terms. Our provider arrangements are designed to prevent API inputs and outputs from being used to train general-purpose provider models except where a Customer separately configures or authorizes that use. If a Customer supplies its own provider credentials, processing under those credentials is governed by that Customer's agreement with its selected provider.
In-chat payments are processed by the payment service selected or configured for the Customer. Payment-card data is transmitted directly to the payment processor and is not stored by Chatworthy. We may retain non-sensitive transaction references, payment status, subscription tier, and billing status as needed to provide the Services, support customers, prevent fraud, and maintain accurate records. We do not receive or store full payment-card numbers.
Detailed security information is available at chatworthy.ai/pages/security. In summary: TLS in transit; managed-database encryption at rest; AES-256-GCM encryption of stored AI API keys; workspace isolation at the database query level; signed inbound webhooks with HMAC verification; rate limiting on public endpoints.
You can request access to, correction of, or deletion of your personal information by emailing privacy@chatworthy.ai. We will respond within 30 days. California, Virginia, Colorado, and Connecticut residents and EEA/UK residents have additional rights under state and regional law, including the right to opt out of any "sale" or "sharing" of personal information (we do neither) and the right to lodge a complaint with a supervisory authority.
Chatworthy is not directed at children under 16, and we do not knowingly collect personal information from them. End Users of widgets deployed on Customer sites are subject to that Customer's own terms; Customers must not deploy Chatworthy widgets in contexts directed at children under 13.
Our services are operated from the United States. If you access Chatworthy from outside the U.S., your information may be transferred to and processed in the U.S. We rely on Standard Contractual Clauses where applicable for EEA/UK transfers.
We will update this policy when our practices change. The effective date above will reflect the most recent change. Material changes will be announced to account holders by email.
Privacy questions: privacy@chatworthy.ai. Security disclosures: security@chatworthy.ai. General contact: hello@chatworthy.ai.
This document is provided as a working draft and should be reviewed by qualified legal counsel before being treated as a legally binding policy for your specific jurisdiction and use case.