Privacy Policy

Introduction

At Chirpedly, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Chirpedly, and how we handle information about your customers when your agent talks with them.

By using Chirpedly, you agree to the collection and use of information in accordance with this policy.

1. Information we collect

1.1 Information you provide

We collect information you directly provide to us:

• Account information: Name, email address, password, company name
• Billing information: None. Nothing is charged during early access, so we hold no payment details.
• Mobile number: If you get a phone number from us, the mobile number you verify with a code we text to it
• Content: Your Knowledge (the articles you write, the files you upload and the pages we read from your website), your skills, and your conversations with your customers, including the photos they send, and the summaries and facts your agent keeps about each customer and their conversations
• Communications: Emails and feedback you send us

1.2 Automatically collected information

We automatically collect certain information:

• Device information: Browser type, operating system, IP address
• Browser storage: Your sign-in session, and small interface preferences such as whether the sidebar is collapsed. A draft message that could not be saved to your account waits here until it can be.
• Log data: Server logs, error reports, performance metrics

We run no analytics, advertising or tracking scripts on chirpedly.com or in the dashboard, and the emails we send carry no open or link tracking.

1.3 Information from apps you connect

When you connect an app such as Shopify, we read records, such as orders, customers and product availability, when a question needs them. A connected store also sends us an update when an order is created, fulfilled or refunded, and we keep those updates while your workspace is active. What the agent looks up during a conversation is kept with that conversation.

When you connect a channel by signing in with Google or Meta, we keep the access you grant, encrypted, and the identifiers of the mailbox, Page or account you connected and of the person who signed in.

1.4 Information about your customers

Chirpedly answers your customers on your behalf, so we also process information about them:

• Conversations: What your customer writes or says, and what the agent and your team reply
• Website chat: The widget keeps a random identifier, the number of unread replies and any message the visitor has not sent yet in the visitor's own browser, so a returning visitor keeps their conversation. On a Shopify store, a signed-in shopper's name and email are linked to that identifier while they stay signed in. Each message also carries the address of the page the visitor is on, the kind of device they use, and whether they came from a search engine, social media, an email or another site.
• Calls: The caller's phone number and a written transcript of the call. We do not store call audio. ElevenLabs processes the audio to run the call, and it is set not to save recordings and to delete its copy of the call after 7 days. Each call begins by telling the caller they are talking to an AI assistant and that the call is transcribed.
• Email: If you connect an Outlook mailbox, or a Gmail mailbox once Gmail is out of coming soon, we read each email that arrives in its inbox after you connect. For an email a person sent, we keep the sender's name and address, the subject, what they wrote and any reply sent from the mailbox in that thread.
• Facebook Messenger and Instagram, coming soon: If you connect one, Meta sends us each message a customer writes to your Page or Instagram account, with the identifier Meta gives that customer and the name Meta shows for them. We keep the conversation and send your agent's and your team's replies back through Meta.
• Identity checks: When a skill needs to confirm who a customer is, what they give to prove it, such as their last name and the last four digits of their card, or a code we email to them
• Records from your connected apps: The order or customer details needed to answer the question in front of the agent

2. How we use your information

We use the information we collect to:

• Provide, operate, and maintain our services, including answering your customers and carrying out the tasks your skills set
• Send you and your team the emails the service needs, such as invitations and alerts
• Review conversations and call transcripts, when needed, to fix problems in how your agent answers, except email from a connected Gmail mailbox, which is handled as "Google user data" below describes
• Communicate with you about updates, security alerts, and support
• Monitor performance and fix problems, using our server logs
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

3. AI and your data

Your agent's replies are written with Google's Gemini models on Vertex AI, or on Google's Gemini API when Vertex AI is too busy to take a request. Some quick decisions, such as which of your skills fits a customer's message, are made by TypeSafe AI's Jev model, which writes no replies. We do not train or fine-tune any model on your data or your customers' data. Google does not train its models on it without our permission, and TypeSafe AI does not train or fine-tune any model on it.

Customers are told up front that they are talking to an AI assistant: website chat shows it under your business's name, Telegram marks every bot as one, each call begins by saying so, and on email and every other channel with no such label the agent's first reply says so. Your agent acts in your connected apps only through the skills your team publishes, and by default refunds and cancellations wait for your team's approval.

4. Google user data

If you connect a Gmail mailbox, which is coming soon, Chirpedly uses the permissions you grant Google to read the email that arrives in its inbox after you connect, to send your agent's and your team's replies from it, and to know the mailbox's address.

• Use: Only to answer the email your customers send and to show those conversations to your team in Chirpedly. The words of each email are sent to Google's Gemini models on Vertex AI, or on Google's Gemini API when Vertex AI is too busy, to write the reply, and to TypeSafe AI's Jev model for quick decisions, such as which of your skills handles it.
• Storage: The sender, the subject, what they wrote and the replies in the thread are kept with the conversation while your workspace is active. The access you granted is stored encrypted.
• Sharing: Only with the service providers listed below that run Chirpedly, or where the law requires it. We never sell it, use it for advertising, or use it to train or improve AI models.
• Reading: Nobody at Chirpedly reads it, except with your permission to look into a problem you report, to keep the service secure, or where the law requires it.
• Removing it: Disconnect Gmail in Connections, or remove Chirpedly from your Google Account's third-party connections. To delete the conversations it brought in, email support@chirpedly.com.

Chirpedly's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Channels you connect with Meta

If you connect Facebook Messenger or Instagram, both coming soon, you sign in with Meta. We keep the access Meta grants, encrypted, the identifiers of the Pages or account you connected, and the identifier Meta gives you for Chirpedly. Meta then sends us the messages your customers write there, handled as section 1.4 describes.

To remove this, disconnect the channel in Connections, or remove Chirpedly in your Meta account's settings. If you ask Meta to delete your data, Meta passes the request to us: we disconnect every channel your sign-in connected and forget the access and identifiers it gave us, and Meta shows you a confirmation code and a page where you can check it was done. Conversations with your customers stay in your workspace; to delete them, email support@chirpedly.com.

6. How we share your information

We do not sell your personal information. We may share your information in the following circumstances:

Service providers

We share information with the service providers who operate parts of our platform. These are all of them:

• Supabase: our database, sign-in and file storage
• Google Cloud: hosting for the service that answers conversations
• Google Vertex AI: the AI models that read conversations and your Knowledge, and write replies
• Google Gemini API: the same AI models, for any request Vertex AI is too busy to take, sent here with the same content
• TypeSafe AI: quick decisions during a conversation, such as which of your skills fits a customer's message. Its Jev model reads what each decision needs, such as the latest messages, what a caller says, your business's name and your skills' descriptions, and writes no replies.
• Anthropic and OpenAI: the AI assistants our team works with (Claude, ChatGPT and Codex). They see customer data only when our team opens it to fix a problem.
• ElevenLabs: speech recognition and the voice on phone calls, including test calls. What the agent says on a call is sent here to be spoken, and the transcript is returned to us.
• Twilio: phone numbers, carrying the calls and text messages to and from them, and texting the codes that verify your mobile number
• Telnyx: carrying calls to one Chirpedly phone number until that number moves to Twilio
• Postmark: the email we send, including notifications to your team that carry a customer's name and message, and verification codes sent to your customers
• Vercel: hosting for chirpedly.com and the dashboard
• Google Fonts: the fonts on chirpedly.com and in the dashboard, so Google receives visitors' IP addresses

Apps and channels you connect

When you connect an app or a channel, such as Shopify, Telegram, an app from Integrations or any MCP server, it receives what your agent's tasks send it. That happens on your instruction, and each one handles the data under its own terms.

Legal requirements

We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights or the safety of others.

Business transfers

If Chirpedly is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

7. Data security

We implement industry-standard security measures to protect your information:

• Encryption in transit and at rest
• Access controls and authentication requirements
• Credentials for your connected apps held encrypted, and never shown again after you connect
• The dashboard can reach only your own workspace's data, and the service that answers conversations scopes every request to your workspace

While we strive to protect your information, no method of transmission over the internet is 100% secure.

8. Data retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

• Account information: Kept while your account is active
• Messages exactly as a platform delivers them to us (from Meta, Google, Telegram, Twilio and the others you connect): Deleted after 30 days. What your customers wrote stays in their conversation.
• Conversations, call transcripts, order updates and Knowledge: Kept while your workspace is active. You can delete Knowledge articles in the product. To delete uploaded files, conversations or a whole workspace, email support@chirpedly.com.
• Billing records: None yet, because nothing is charged during early access. Once paid plans open, billing records will be kept for 7 years for tax and accounting purposes.
• Records of what the agent did: We keep a log of every action the agent attempted and its outcome, with identifying details stripped out. This survives a deletion request on purpose: it is the anonymous audit trail that shows a deletion happened.

Uninstalling a connected store

If you remove Chirpedly from a connected store, we drop that store's credentials as soon as the platform tells us, and the store can immediately be connected somewhere else. When the platform then asks us to erase the store's data, 48 hours later on Shopify, we delete what came from that store: the orders and customer details it sent us, and the links between your website chat visitors and the store's customer accounts. Your Chirpedly workspace and its conversations are kept, so that an accidental uninstall does not destroy your history. To remove them, contact us at support@chirpedly.com.

Requests from your customers

When a platform such as Shopify passes on a request from one of your customers to see their data, we tell you, so you can answer it. When it passes on a request to delete their data, we remove that person's records, conversations and call transcripts from your workspace. We act on both within 30 days.

9. Your privacy rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to processing of your information for certain purposes
• Withdraw consent: Withdraw consent where we rely on it to process your information

To exercise these rights, please contact us at support@chirpedly.com.

10. Additional rights for EEA and California residents

European users (GDPR)

If you are in the European Economic Area, local law may give you additional rights, including the right to lodge a complaint with your local data protection authority.

California users (CCPA)

California residents may have rights to know what personal information is collected, request deletion, and receive information about disclosure practices. We do not sell personal information.

11. Children's privacy

Our services are not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

12. International data transfers

Your information may be transferred to and processed in countries other than your country of residence. When those transfers require additional safeguards, we use contractual and operational measures intended to protect personal data and meet applicable legal requirements.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Contact us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Data protection contact
Email: support@chirpedly.com
Website: https://chirpedly.com