Legal
Privacy Policy
How GlobalChatbot collects, uses, and protects your data.
Effective: 2026-06-06
Who we are
GlobalChatbot is operated by Syntranova AL LTD, registered in Cyprus (HE 485824), with offices at 1065 Nicosia, Cyprus.
For privacy questions: support@globalchatbot.ai. EU Data Protection Officer: support@globalchatbot.ai.
Data we collect
Account data. Email, name, organization name, password hash, role. Collected when you sign up.
Usage data. Conversations between your customers and your bot. Tool call payloads. Lead capture fields. Stored in your dedicated organization namespace.
Billing data. Stripe customer ID, subscription status, tax ID. Card numbers are stored by Stripe (PCI scope) — we never see them.
Technical data. IP address, user agent, device type. Used for security (rate limiting, fraud detection) and basic analytics.
How we use it
- To deliver the service you signed up for
- To bill you (via Stripe)
- To detect and prevent fraud / abuse
- To improve product quality (aggregated, non-identifiable)
- To communicate about your account (transactional emails only, unless you opted into marketing)
We do not sell your data. We do not train shared AI models on your customer conversations.
Third-party AI processing
To provide chat answers, voice transcription and knowledge-base training, we send the following
to OpenAI, our only third-party AI processor:
- the message text you or your visitors type
- voice recordings you record in the app, for transcription
- the conversation history of the active chat, for context
- knowledge-base content you upload or dictate
We do not send your name, email address, phone number, or payment information to OpenAI.
OpenAI acts as our data processor under a Data Processing Agreement, with Standard Contractual
Clauses (SCCs) covering transfers outside the EEA. OpenAI does not use this data to train its
models, and provides protections equivalent to those described in this policy.
In our mobile apps we ask for your explicit permission before any data is sent to OpenAI. You can
withdraw that permission at any time in Settings; AI features are then disabled and no further
data is sent.
Sub-processors
We use the following sub-processors to deliver the service:
| Vendor | Purpose | Region |
|---|---|---|
| OpenAI | Inference + embeddings | US (EU residency available on Business) |
| Pinecone | Vector database | Per-tenant namespace |
| Stripe | Billing | EU/US |
| Brevo | Transactional email | EU |
| Hetzner | Hosting infrastructure | Germany (EU) |
| n8n | Workflow execution | Self-hosted on Hetzner (EU) |
A complete and current sub-processor list is available on request: support@globalchatbot.ai.
Your rights (GDPR / CCPA)
You have the right to:
- Access your data (1-click export from dashboard)
- Rectify inaccurate data (edit in dashboard or email us)
- Delete your account and all associated data (1-click in Settings)
- Restrict processing (contact privacy@)
- Object to processing (contact privacy@)
- Portability (export all your data in JSON / CSV)
Requests honored within 30 days. Usually within 24 hours.
Retention
Account data: retained while account is active. Deleted within 30 days of account closure.
Conversation logs: retained for 12 months by default. You can configure shorter retention in Settings.
Billing records: 7 years (legal requirement EU).
Children
GlobalChatbot is not intended for use by children under 16. If you become aware that a child has provided us with personal information, contact us and we will delete it.
Changes
We may update this policy. Material changes will be notified to your account email at least 30 days in advance.
Last updated: 2026-06-06.