Privacy Policy

We collect the following categories of personal data:

• Account information — name, email address, and authentication credentials (passkeys).
• Business information — business name, phone numbers, and team member details you provide during onboarding.
• Conversation data — messages exchanged between your customers and your AI support bots or human agents.
• Knowledge base content — documents and text you upload to train your AI bots.
• Usage and analytics data — conversation metrics, dashboard statistics, and feature usage patterns.
• Billing information — payment details are collected and processed by Stripe; we store only a Stripe customer identifier.

• Provide, maintain, and improve the GSL platform and AI support features.
• Generate AI responses to customer queries using your uploaded knowledge base.
• Produce analytics dashboards and conversation metrics for your business.
• Process billing and manage your subscription.
• Send transactional communications (e.g., email verification, security alerts).
• Detect and prevent fraud, abuse, and security incidents.

We retain your data for as long as your account is active or as needed to provide our services. Specifically:

• Account and business data — retained until you delete your account.
• Conversation data — retained for 12 months after the conversation ends, then automatically deleted.
• Knowledge base content — retained until you delete the source or your account.
• Analytics data — aggregated and retained for up to 24 months.
• Billing records — retained as required by applicable tax and financial regulations.

We use the following third-party services that process your data:

• OpenAI — processes conversation messages and knowledge base content to generate AI responses and embeddings. Data sent to OpenAI is subject to OpenAI's Privacy Policy.
• Stripe — processes payment information for subscription billing. Payment data is subject to Stripe's Privacy Policy.

We do not sell your personal data to any third party.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your personal data, subject to legal retention requirements.
• Portability — request an export of your data in a machine-readable format.
• Restriction — request that we limit the processing of your data.
• Objection — object to the processing of your data for certain purposes.

To exercise any of these rights, please contact us using the information below.

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews.

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: privacy@getgsl.com