This Privacy Policy explains how Hyper Trellis SRL (“Hyper Trellis”, “we”, “us”, “our”) collects, uses, and safeguards personal data when you use KuraChat, our customer-support widget and AI chatbot platform, together with our website and related services (the “Service”).
1. Who we are
The data controller is Hyper Trellis SRL, a company registered in Romania with its registered office at Bdul. Iuliu Maniu 57, Bl. OD16, Sc. E, Et. 2, Ap. 188, Cod 061081, Sectorul 6, Bucharest, Romania. For any privacy matter, or to exercise your rights, contact us at privacy@kurachat.com.
2. Data we collect
- Account data — your name, email address, company name, and a hashed password.
- Billing data — plan and transaction details; card data is handled directly by our payment processor.
- Knowledge content — the business details, FAQs, policies, and documents you provide for the assistant to learn from.
- End-user conversation data — messages exchanged between your website visitors and the chatbot.
- Usage and device data — IP address, browser and device type, pages viewed, and timestamps.
- Cookies and similar technologies — used to keep you signed in and to understand usage.
3. How we use data
- To provide, operate, and maintain the Service.
- To generate AI answers grounded in your content, within your workspace only.
- To authenticate users and secure accounts against abuse.
- To process payments and manage subscriptions.
- To provide customer support and respond to enquiries.
- To send service messages and, with your consent, product updates.
- To analyse and improve the Service using aggregated or de-identified data.
- To comply with legal obligations and enforce our terms.
4. Legal bases for processing (GDPR)
- Performance of a contract (Art. 6(1)(b)) — to deliver the Service you sign up for.
- Legitimate interests (Art. 6(1)(f)) — e.g. securing the Service and improving our product.
- Consent (Art. 6(1)(a)) — e.g. marketing communications and non-essential cookies.
- Legal obligation (Art. 6(1)(c)) — e.g. accounting and tax requirements.
5. Controller and processor roles
For personal data in your own account (such as your login and billing details) we act as a data controller. For personal data contained in the conversations your end users have with the chatbot, we act as a processor on your behalf. A Data Processing Agreement is available on request.
6. Sharing and sub-processors
We do not sell personal data. We share it only with service providers that help us run the Service, under contract and with appropriate safeguards, including cloud hosting, AI/LLM providers, payment processors, transactional email, and analytics/error-monitoring providers. We may also disclose data where required by law.
7. International transfers
Where personal data is transferred outside the European Economic Area, we rely on an adequacy decision or on Standard Contractual Clauses approved by the European Commission, together with additional safeguards where appropriate.
8. Data retention
We retain personal data for as long as your account is active and as needed to provide the Service, then for any period required to meet legal obligations. You can delete workspace content at any time; residual copies in backups are purged on a rolling schedule.
9. Security
We protect data with encryption in transit and at rest, workspace isolation, access controls, and rate limiting. No method of transmission or storage is completely secure, but we work continuously to protect your information.
10. Your rights
Subject to the GDPR, you have the right to access, rectify, erase, restrict, or object to processing, the right to data portability, and the right to withdraw consent at any time. To exercise these rights, email privacy@kurachat.com. You may also lodge a complaint with the Romanian supervisory authority (ANSPDCP).
11. Cookies
We use essential cookies to run the Service and, with your consent, optional analytics cookies. You can manage preferences through our cookie banner or your browser settings.
12. Children
The Service is not directed to children under 16, and we do not knowingly collect their personal data.
13. Changes to this policy
We may update this policy from time to time. The “last updated” date reflects the latest version, and we will notify you of material changes where required.
14. Contact
For any privacy question, contact privacy@kurachat.com or write to us at the address below.