Privacy Policy

GETABOOKING LTD is the data controller for personal data we process as described in this policy. Registered in England & Wales.

ICO Registration: ZC056548
Contact: [email protected]

cloudaichatbot provides an AI chat widget that businesses add to their own websites. This creates two distinct relationships:

• Our customers (account holders). For the account holder’s own personal data (sign-in email, settings, billing), we are the data controller.
• A customer’s website visitors. When a visitor chats with a widget on a customer’s site, the business operating that site is the data controller for the visitor’s data, and we act as a data processor on their behalf, processing chat content only to provide the service.

• Account data: the email address you sign in with, your widget configuration and instructions, and billing status (payments are handled by a third-party payment processor — we do not store card details).
• Chat content: the conversations your widget has with your website visitors. We store these so you can review them and so we can produce your analytics and insight reports. Chat content may contain personal data that a visitor chooses to type (for example, their name, email or phone number when they ask to be contacted).
• Minimal footprint: we do not store visitors’ IP addresses, and we do not collect a visitor’s email address unless the visitor provides it in the chat. We keep the data we hold about visitors to the minimum needed to run the service.

Where an account holder enables lead capture, the chatbot may collect a visitor’s contact details so the business can follow up. The chatbot asks the visitor for their permission before passing their details to the business, and makes clear that their details will be shared with the business operating that website. We only email captured lead details to the account holder where the visitor has provided contact details and indicated they wish to be contacted. Visitors can decline and continue using the chat.

• Contract: to provide the chatbot service to our account holders.
• Consent: where a visitor agrees to have their details shared with a business for follow-up.
• Legitimate interests: to operate, secure and improve the service, and to respond to enquiries the visitor has initiated.
• Legal obligation: to comply with applicable law.

• Provide and maintain the chatbot and dashboard.
• Generate the knowledge your bot answers from (from pages and content you provide).
• Produce your live analytics, transcripts and monthly insight email.
• Send lead/enquiry details to you where a visitor has consented.
• Secure the service and prevent abuse.

• The business operating the widget — captured lead details, with the visitor’s consent.
• Cloud infrastructure & AI model providers — to host and run the Service and generate responses.
• Email delivery providers — to send transactional emails (sign-in codes, lead and report emails).
• A payment processor — for subscription payments (card details are handled by them, not us).
• Legal requirements — where required by law or to protect our rights.

We share data with these categories of providers only as needed to run the Service, and we may change providers at our discretion. We do not sell personal data. A current list of the categories of providers we use is available on request.

Answers are generated by a large language model provided through our AI model provider, using the knowledge you provide and the visitor’s message. We do not use your chat content to train third-party foundation models.

We keep account data while your account is active. Chat content is retained to provide analytics and reports; you can delete your knowledge and we will delete associated stored content. Contact us to request deletion of your data.

You have the right to access, rectify, erase, port, restrict and object to processing of your personal data, and to withdraw consent. To exercise these, contact [email protected]. You may also complain to the Information Commissioner’s Office (ICO).

We keep cookie use to a minimum. The dashboard stores a single session token in your browser’s local storage to keep you signed in. See our Cookie Policy.

Data may be processed by service providers outside the UK/EU. Where it is, we rely on appropriate safeguards (such as the UK IDTA or SCCs).

The service is not intended for children under 16 and we do not knowingly collect their data.

We may update this policy and will post changes here with a new “last updated” date.

GETABOOKING LTD · [email protected] · ICO Registration ZC056548. This policy complies with UK GDPR and the Data Protection Act 2018.