Privacy policy

Chattish turns a website into a site map and an on-site guide that answers visitors' questions with links to the right page. This page explains what data that involves. "We" means Chattish; "customer" means the business that adds Chattish to its website; "visitor" means someone using the chat on that website.

What we crawl

• Only public pages of the site a customer adds: pages anyone can open without signing in. We follow robots.txt for our crawler (ChattishBot), skip pages marked noindex, and leave out comment and review sections.
• When a customer maps their site from their own browser, the Chattish snippet reads the same public pages in that tab and sends them to us. It sends no cookies or sign-in details.
• We keep a text copy of each page, a summary and the facts the guide uses to answer. We use these only to run the customer's guide and dashboard.

Visitor chat data

• The questions visitors type, the guide's answers and the links shown, plus which links were opened and any thumbs up or down.
• An anonymous, random visitor id stored in the visitor's browser, the page the chat was opened on (without the part after the “?”, except campaign tags such as utm_source), the browser type (such as “Chrome on Android”, never the full browser string) and an approximate country. We don't use advertising cookies or trackers.
• Contact requests: if a visitor chooses “Talk to a person” in the chat, they give an email address, optionally a name, and a message, and tick a consent box (linked to the website's own privacy policy when it has one). We keep the exact consent sentence the visitor saw, in the language it was shown in. The website's team reads the request in their Inbox, adds notes and replies by email. On paid plans with a verified website, the team can send the reply through Chattish: it comes from our reply address on the team's behalf, with replies going to the team, and every such email has a link that stops further replies from that website (or from every website on Chattish) right away. To honor that, we keep only a one-way hash of the address, never the address itself. Otherwise, we never ask visitors for their name or email address.
• If the customer connects Slack or their own webhook, new contact requests (including the visitor's email address), new unanswered questions and usage warnings are sent there. That destination is chosen and controlled by the customer.
• IP addresses are used for a short time to stop abuse (rate limits). They are not used to build profiles.
• The customer can read their site's conversations in the dashboard. They are the controller of that data; we process it on their behalf.
• Visitors who want their chat data deleted can ask the website owner. The owner can delete one conversation, every conversation from the same browser (its visitor id), or every contact request from an email address with the chats it came from, in Settings → Privacy & data. That removes the messages, link clicks and feedback right away. Visitors can also write to hello@chatti.sh; we'll pass the request to the website owner.
• Visitors shouldn't share sensitive personal information in the chat. The guide only answers from the website's own pages.

Customer account data

Your email address (for sign-in links and the weekly report), your organization and site settings, and billing status. For security, each sign-in session keeps the IP address and browser it was created from. Card details go directly to Stripe; we never see or store them.

Analytics on chatti.sh

• To improve Chattish, we count how our own website and dashboard are used: pages viewed, buttons clicked and a few steps such as adding a site, seeing the guide installed or opening checkout. We use PostHog (EU data region) for this.
• No cookies and nothing stored in your browser: each page load gets a new random id that lives only in memory. There is no session recording, and no page text or anything you type is collected. Addresses are cut before the “?” and “#”, and private links (sign-in, invite and share links) are never recorded.
• Requests go through our own server, which doesn't pass your IP address on to PostHog, and we don't look up your location. When you are signed in, we link these events to your internal account id, your organization's id, its plan and your dashboard language, never to your name or email address.
• This runs only on chatti.sh and the dashboard: never in the chat guide on our customers' websites, and never on client share pages. If your browser sends Do Not Track or Global Privacy Control, nothing is collected.

Retention

• Crawled pages and the site map are kept while the site is in your account.
• Visitor conversations (questions, answers, links, clicks, thumbs up or down and the visitor id) are deleted automatically, every night, once their last message is older than the plan's retention period: Free 30 days, Starter 90 days, Growth 1 year and Agency 2 years. The customer can choose a shorter period (30 days, 90 days, 180 days, 1 year or 2 years, up to the plan's period).
• Unanswered questions (the question text and how often it was asked) are deleted once nobody has asked them for the same period. Daily totals (counts only, no text or ids) are kept for the dashboard charts.
• Contact requests, with the team's notes and replies, are deleted once nothing has happened on them for the same period. The log of deliveries to Slack or webhooks is kept for 30 days, and the message content is removed as soon as a delivery succeeds or gives up.
• Deleting a site deletes its pages, map, conversations, content gaps, drafts and stored page copies right away.
• The owner can delete the whole organization in Settings → Privacy & data. It takes effect right away, with no grace period: the paid plan is cancelled, and every site, team member, invite, API key and email record is deleted. Team members who don't belong to another organization lose their account too.
• You can delete your own account in Account → Notifications → Delete my account. It takes effect right away: your sign-in, sessions and email preferences are deleted, your email address is removed from your teams' activity (notes, replies, settings history), and workspaces where you are the only member are deleted like an organization above. If you are the only owner of a team with other members, you first make someone else owner. Accounts that no longer belong to any organization are deleted after 7 days. Stripe keeps its own billing records for a cancelled subscription, as accounting rules require.
• Deleted data can remain in database backups (point-in-time recovery) for up to 30 days, then it is gone.
• Security data: sign-in sessions (with their IP address and browser) are deleted 7 days after they expire, sign-in links after 7 days and rate-limit counters within 2 days. Our operations audit log keeps IP addresses for 90 days. The log of emails we send you is kept for 1 year.

Subprocessors

These companies help us run Chattish and only get what they need for their part:

• Cloudflare: hosting, database, file storage, queues, email sending and security.
• OpenRouter and the AI model providers it routes to: page text and visitor questions are sent to generate summaries and answers. We ask OpenRouter to use only providers that don't store or train on the data.
• Stripe: subscriptions and payments.
• PostHog (EU region): usage analytics of chatti.sh and the dashboard, without cookies, session recording or IP addresses (see “Analytics on chatti.sh” above).

We don't sell data

We don't sell or rent customer or visitor data, and we don't use it for advertising. We don't share it except with the subprocessors above, or when the law requires it.

Your choices

• Owners and admins can download their data at any time in Settings → Privacy & data: conversations (CSV or JSON), unanswered questions (CSV) and pages (CSV). Every download is logged.
• Customers can shorten how long conversations are kept, delete a visitor's data and delete their organization there too. Anyone can delete their own account in Account → Notifications.
• For anything else (a copy of your account data, a correction or deletion), write to hello@chatti.sh and we'll reply within 30 days.

Contact

Questions about this policy: hello@chatti.sh.