Privacy Policy

1. Information We Collect

• Account Information: email, company name, billing details when you sign up
• Chat Data: messages, session history, conversation metadata between your customers and your AI agents
• Lead Information: name, email, phone, company when end users submit contact forms
• Usage Data: feature usage, page views, analytics telemetry
• Messaging Data: messages sent and received via WhatsApp, Telegram, and Instagram integrations

2. How We Use Your Data

• To operate, maintain, and improve the Domainchat platform
• To power AI agent conversations using third-party AI models (OpenAI, Google Gemini)
• To create vector embeddings of your knowledge base for accurate responses
• To generate analytics and insights about customer interactions
• To process payments and manage your subscription
• To comply with legal obligations and enforce our Terms of Service

3. Data Storage & Security

• Relational data is stored in Supabase (PostgreSQL) with row-level security
• Vector embeddings are stored in Pinecone with per-tenant namespace isolation
• Caching and rate-limiting data is stored in Upstash (Redis)
• All data is encrypted in transit (TLS 1.3) and at rest
• Access is controlled via role-based permissions (Owner, Moderator)
• Compliance events are recorded in a tamper-proof audit log with SHA-256 chaining

4. Data Retention

• Chat session state expires after 72 hours of inactivity
• Lead data and conversation history are stored until the workspace owner deletes them
• Account data is retained for the duration of your active subscription
• Upon account deletion, all associated data is permanently removed within 30 days

5. Your Rights (GDPR & Other Jurisdictions)

• Access: export all your data via workspace settings or by emailing us
• Deletion: purge all data via workspace settings or submit a GDPR deletion request
• Correction: update account information at any time in settings
• Portability: export your data in JSON format
• To exercise these rights, contact us at info@msquaredigitalhub.com

6. Data Controller & Processor

Domainchat is a product of Msquare Digital Hub. Our customers (tenants) act as Data Controllers for their end users' data. Domainchat acts as a Data Processor, processing data solely on our customers' instructions.

7. Third-Party Services

• OpenAI / Google (Gemini) — AI model providers for chat responses
• Pinecone — vector database for knowledge base embeddings
• Upstash — Redis caching and rate limiting
• Supabase — database, authentication, and file storage
• Inngest — background job processing
• Razorpay / Paddle — payment processing (no card data stored by us)
• Vercel — hosting and deployment infrastructure

8. Cookies

We use cookies and similar technologies for authentication, session management, and analytics. By using Domainchat, you consent to our use of cookies as described in this policy. You can manage cookie preferences through your browser settings.

9. Contact

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or through a notice on the platform. Continued use after changes constitutes acceptance.