Privacy Policy

1. Information We Collect

We collect the following categories of personal information:

• Identifiers — such as your name, email address, account username, IP address, and device or browser identifiers.
• Commercial information — such as your subscription plan, billing records, wallet balance, payment method details processed by our payment providers, and transaction history.
• Internet or electronic network activity — such as pages viewed, features used, clickstream data, logs, cookies, and analytics data collected through tools like PostHog.
• Customer-service content — such as knowledge-base documents, FAQs, and the content of conversations received through Crisp, Telegram, or other integrated channels, as well as AI-generated replies.
• Geolocation data — such as approximate location derived from your IP address.
• Professional or employment information — such as company name or role, if you choose to provide it.
• Inferences — such as usage patterns or preferences drawn from your account activity.

We do not intentionally collect sensitive personal information such as government identifiers, health information, or biometric data. If such information is included in data you choose to upload, you are solely responsible for obtaining any required consents.

2. Sources of Personal Information

We collect personal information directly from you (for example, through registration, subscription forms, and knowledge-base uploads), automatically when you use the Service (through cookies, logs, and analytics), and from third-party integrations you connect (such as Crisp, Telegram, Stripe, and cryptocurrency networks).

3. How We Use Personal Information

We use personal information to operate and improve the Service; generate AI-powered replies; process payments and subscriptions; provide customer support; maintain security and prevent fraud; communicate with you; comply with legal obligations; and analyze usage through analytics tools.

4. How We Share Personal Information

We do not sell or share personal information for cross-context behavioral advertising. In the preceding 12 months, we have disclosed personal information only for operational business purposes to the following categories of recipients:

• Service providers — such as cloud hosting, analytics providers (for example, PostHog if used in your deployment), and communication services.
• AI / LLM providers — to generate responses. We require these providers to handle your data only as needed to provide the Service to you and in accordance with our data protection requirements. If you need details about a specific provider's data practices, contact us.
• Channel integrations — such as Crisp and Telegram, to send and receive messages on your behalf.
• Payment processors — such as Stripe and cryptocurrency networks, to process payments and wallet deposits.
• Legal and safety recipients — when required by law, legal process, or to protect our rights, users, or the public.
• Business transferees — in connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality obligations.

5. Notice for California Residents (CCPA/CPRA)

If you are a California resident, the following disclosures apply to you. In the preceding 12 months, we have collected and disclosed for a business purpose the categories of personal information listed in Section 1, and we have not sold or shared personal information.

You have the right to:

• Know what personal information we collect and how we use it.
• Access the specific pieces of personal information we have collected about you.
• Request deletion of your personal information.
• Request correction of inaccurate personal information.
• Opt out of the sale or sharing of personal information (we do not engage in these practices).
• Limit the use or disclosure of sensitive personal information (we do not use sensitive personal information for purposes other than providing the Service).
• Exercise these rights without receiving discriminatory treatment.
• Use an authorized agent to submit a request, provided the agent is properly authorized under California law.

To exercise your rights, email us at [email protected] or contact us through the Telegram channel listed on our website. We will verify your identity before fulfilling a request and respond within the timeframes required by law.

6. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service. Knowledge-base content and channel conversation data are retained according to your project settings and until you delete them. Payment and billing records are retained for the periods required by applicable tax and accounting laws. You may request deletion of your account and data by contacting us; we may retain certain data as necessary for security, fraud prevention, or legal compliance.

7. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information. No security measure is perfect, and we cannot guarantee the absolute security of information transmitted over the Internet.

8. International Data Transfers

We are based in the United States and process data here and in other jurisdictions where our service providers operate. By using the Service, you consent to the transfer and processing of your information in the United States and other countries, which may have data protection laws different from those in your jurisdiction.

9. Cookies and Tracking

We and our service providers use cookies and similar technologies for authentication, analytics, and to remember your preferences. You can manage cookies through your browser settings. Disabling cookies may affect certain features of the Service.

10. Children's Privacy

The Service is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us and we will delete it promptly.

11. Governing Law

This Privacy Policy is governed by the laws of the State of California and the United States, without regard to conflict-of-laws principles.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on the Service with an updated "Last updated" date. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

13. Contact Us

The Service is operated by GPT KeFu. For our formal legal entity name and physical mailing address, please contact us at [email protected]. General questions may also be submitted through the Telegram channel or community group listed on our website.