Privacy Policy

1. Data Controller

The entity responsible for processing your personal data is VigiDrAI.

Contact email: [email protected]

2. Data We Collect

We collect the following personal data:

• Email address (required for registration)
• Company name (required for registration)
• Phone number (optional)
• Payment information processed through Stripe (we do not store card details)
• Data from leads captured by your chatbot (name and email)

3. Purpose of Processing

Your data is processed for the following purposes:

• Manage your user account and provide the chatbot service
• Process payments and subscriptions
• Send service-related communications (plan activations, technical issues)
• Provide technical support

4. Legal Basis

The processing of your data is based on:

• Contract execution: Necessary to provide the requested service
• Consent: When you register and accept these terms
• Legitimate interest: To improve our services and prevent fraud

5. Data Retention

Your data will be retained while there is an active subscription or legitimate interest. You may request the deletion of your data at any time by contacting [email protected].

Subscription Data: VigiDrAI offers four subscription plans (Essentials, Starter, Pro and Business). Data associated with your subscription — including chatbot configurations, conversation logs and analytics — is retained for the duration of your active plan. If you cancel, data is retained until the end of the paid billing period and then scheduled for deletion.

Multi-Chatbot Add-Ons: When you add extra chatbots to your plan, each add-on generates additional data (configurations, conversations, leads). If you remove an add-on, the associated chatbot remains active until the end of the current billing cycle and its data is deleted thereafter. No prorated refund is issued.

Free Trial: Unregistered visitors may send up to 20 messages to a public chatbot. Conversation data from free-trial interactions is retained for analytics purposes and deleted after 12 months of inactivity.

Inactive Account Deletion: Accounts with no activity (payments or subscription renewals) for more than 3 consecutive years will be permanently deleted, including all associated data. A notification will be sent at least 15 days before deletion.

6. Your Rights

Under the GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing of your data
• Restriction: Request limitation of processing

To exercise these rights, contact us at [email protected]

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

8. Third-Party Services

We use the following third-party services:

• Stripe: For payment processing
• Cloud hosting providers: For data storage and service provision
• AI language model providers: Chatbot conversations are processed by third-party large language models. No personally identifiable data is sent unless included in the user's message.

9. Applicable Law & Jurisdiction

This Privacy Policy is governed by Regulation (EU) 2016/679 (GDPR) and, where applicable, by local data-protection laws of the country where the data subject resides. Any disputes shall be submitted to the competent courts of the data controller's jurisdiction, without prejudice to the data subject's right to lodge a complaint with a supervisory authority.