Privacy Policy

1. Information We Collect

• Account Information: email, company name, billing details when you sign up
• Chat Data: messages, session history, conversation metadata between your customers and your AI agents
• Lead Information: name, email, phone, company when end users submit contact forms
• Usage Data: feature usage, page views, analytics telemetry
• Messaging Data: messages sent and received via WhatsApp, Telegram, Instagram, and Facebook Messenger integrations

2. How We Use Your Data

• To operate, maintain, and improve the Domainchat platform
• To power AI agent conversations using advanced AI language & embedding models
• To create vector embeddings of your knowledge base for accurate responses
• To generate analytics and insights about customer interactions
• To process payments and manage your subscription
• To comply with legal obligations and enforce our Terms of Service

3. Data Storage & Security

• Relational data is stored securely with row-level security policy enforcement
• Vector embeddings are stored in isolated vector storage with per-tenant data vault isolation
• Caching and rate-limiting data is stored in high-performance memory stores
• All data is encrypted in transit (TLS 1.3) and at rest
• Access is controlled via role-based permissions (Owner, Moderator)
• Compliance events are recorded in a tamper-proof audit log with SHA-256 chaining

4. Data Retention & Protection

• Active Account Retention: All trained knowledge sources, CRM leads, and chat histories are retained indefinitely while your workspace account is active.
• Plan Downgrades / Inactivity: Data is never deleted due to non-payment or plan downgrades. Secondary agents are safely paused, but all trained knowledge and chat logs remain 100% saved.
• 30-Day Recovery Vault: When you initiate workspace deletion, your data enters a 30-day safety vault (PENDING_DELETION). AI agents are paused immediately, but all your data remains securely saved.
• 1-Click Restoration: Workspace owners can restore their workspace and reactivate agents anytime within the 30-day recovery period.
• Permanent Purge: After 30 consecutive days in the recovery vault, all tenant records, vector embeddings, lead databases, and transcripts are permanently deleted from our servers.

5. Your Rights & Self-Service Tools (GDPR & Privacy Regulations)

• Data Export (Portability): Workspace owners can download a complete Workspace Backup (.json) prior to deletion or anytime in workspace settings.
• Workspace Deletion: Initiate soft deletion with a 30-day recovery window directly from workspace settings.
• Correction & Erasure: Update account details or request immediate GDPR erasure by contacting info@domainchat.co.

6. Data Controller & Processor

Domainchat is a product of Msquare Digital Hub. Our customers (tenants) act as Data Controllers for their end users' data. Domainchat acts as a Data Processor, processing data solely on our customers' instructions.

7. Cookies

We use cookies and similar technologies for authentication, session management, and analytics. By using Domainchat, you consent to our use of cookies as described in this policy. You can manage cookie preferences through your browser settings.