Privacy

SmartChat sits between two of them, and conflating the two is how privacy pages become useless. You are our customer. Your visitors are yours — for their data you are the controller and this software is the processor. What follows says which is which.

Your name, email address and hashed password; the account and websites you create; your team's membership and roles; and an audit log of significant actions — who signed in, who changed a role, who revoked a key.

Passwords are hashed with Argon2id and are never recoverable, by us or by anybody.

The messages they send, anything they type into a pre-chat or offline form, and files they attach. Alongside that: a browser and operating system name, device type, language, country, and the pages they visited on your site while the widget was loaded.

Country only — never a finer location. The browser's own claims about itself are recorded as claims and are never used to decide what anybody is allowed to see.

A visitor is identified by a token stored in the widget's own origin, not by a cookie on your domain, and not by any cross-site identifier.

No third-party analytics or tracking script runs on this site, in the dashboard, or in the widget on your customers' pages. Nothing here is sold, shared with advertisers, or used to train a model. There is no advertising identifier and no cross-site profile.

You set a retention window per account. A nightly job removes conversations past it along with their messages and the files behind them — the objects in storage, not merely the rows pointing at them.

Tickets, contacts and the audit log are kept deliberately: a ticket is a commercial record, and an audit log that erased the record of its own operation would be pointless.

Being straight about a gap: self-service erasure and account export are not built into the product yet. A request for either is handled by whoever operates this installation, directly against the database. If that matters to you, ask before you commit — the contact page says where to write.

Wherever this installation runs. SmartChat is self-hosted: there is no central service and no vendor holding a copy. The operator of this deployment can tell you the jurisdiction, and should state it here.

Encryption in transit, tenant isolation enforced in the schema as well as in the code, scoped credentials, and a Content Security Policy on every surface. To report something, use the security address on the contact page — we would much rather hear from you.