Privacy & Data Processing Policy

Last Updated: January 2026

1. Data Collection & Purpose

Chat Workz ("The Provider") collects and processes data necessary to provide automated commerce and AI communication services. This includes:

• Business Profile Data: Menus, price lists, and business FAQs provided by you to train Chat Serv and Order Chat.

• Customer Interaction Data: Transcripts of chats, SMS, and voice calls processed by our AI. We use this to provide you with lead analytics and to refine AI accuracy.

• Transaction Data: Information regarding orders placed through Order Chat. Payment processing is handled by third-party PCI-compliant partners (e.g., Stripe); we do not store full card details on our local servers.

2. AI Training & Privacy

• Specific Training: Data provided by the Customer is used to train their specific AI "Brain." This data is partitioned and not shared with other clients.

• Optimization: We may use anonymized interaction logs (stripped of all Personally Identifiable Information) to improve our core machine-learning algorithms.

• No Data Selling: We strictly do not sell business or customer data to third-party advertisers.

3. Data Processing Agreement (DPA)

Under UK GDPR, the Customer acts as the Data Controller, and Chat Workz acts as the Data Processor.

• Compliance: We process all end-user data in accordance with the Data Protection Act 2018 and UK GDPR.

• End-User Transparency: It is the Customer's responsibility to update their own website privacy policy to inform their users that an automated AI service (Chat Serv) is being used to process inquiries and orders.

• Sub-Processors: We use Tier-1 cloud providers (e.g., Google Cloud, AWS) to host AI models and data. All sub-processors are vetted for GDPR compliance.

4. Data Retention & Deletion

• Active Subscriptions: We retain logs for the duration of the service to provide historical business insights.

• Cancelled Accounts: Upon termination, the Customer's specific AI training data and interaction logs are scheduled for deletion after 60 days, unless a longer period is required for tax or legal compliance.

• The "Right to be Forgotten": If one of your customers requests the deletion of their data, we will facilitate this request within 30 days of receiving your written instruction.

5. Hardware & Security

• Device Security: The hardware provided (Tablets/Printers) is locked to the Chat Workz ecosystem. Customers must not attempt to install third-party software that could compromise data security.

• Data Breech: In the unlikely event of a data breach, Chat Workz will notify the Data Controller (The Customer) within 72 hours of discovery.