Privacy Policy
Last updated: 11 July 2026
1. Who we are
faztino (“we”, “us”) provides an AI assistant product for websites. This policy explains how we process personal data when you use our website, dashboard, or customer-facing chat widget. If you use faztino on someone else’s site, that site’s operator is also responsible for how they use the service.
2. Data we collect
- Account data: email and name when you register; sign-in is handled by our authentication provider (Clerk), which may process credentials or OAuth according to your chosen method.
- Service data: assistant configuration, training content derived from URLs you provide, chat messages, and optional lead emails submitted through the widget.
- Technical data: IP address, browser type, and similar diagnostics from your requests (including rate limiting and security).
- Visitor analytics: when someone chats with an assistant on a customer’s website, we record the conversation session together with a coarse country (derived from the network request, not from a location service), a device class (mobile, tablet, desktop), a browser and operating system name, the page the chat began on, and the host of the referring site (for example “google.com”). We do not store the referring web address itself, because it can contain personal information in its query string.
- Visitor IP addresses are not stored. We keep only a one-way, secret-keyed hash of the IP so that repeat visits can be counted. The hash cannot be reversed to recover the address, and we cannot use it to identify anyone. We do not set cookies on visitors for analytics, and we do not sell or share visitor data with advertisers.
- Billing: if you subscribe, our payment providers (Stripe and Paystack) handle card data; we receive identifiers and subscription status. We never see or store your card details.
3. How we use data
To provide and improve the service, authenticate users, prevent abuse, process payments, and comply with law. We process chat content to generate responses and to store conversation history as configured per-account.
UK / EEA users: we rely on contract (Art. 6(1)(b) GDPR), legitimate interests (e.g. security and product improvement, Art. 6(1)(f)), and consent where required (e.g. non-essential cookies).
5. Processors & sub-processors
We use infrastructure and service providers (e.g. hosting, database, email provider, OpenAI for AI processing, Clerk for authentication, Stripe and Paystack for payments). They process data in line with our instructions and contracts.
6. International transfers
Your data may be processed outside your country of residence. Where we transfer personal data from the UK or EEA, we use appropriate safeguards (e.g. Standard Contractual Clauses) where required.
7. Retention
We keep data only as long as needed for the purposes above or as required by law. You may delete your account or request deletion (subject to legal exceptions) by contacting us.
Visitor analytics records (country, device, browser, referring host, hashed IP) are deleted automatically 90 days after the visit. Deleting an assistant deletes its conversation and visitor records with it.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing, and to data portability. You may lodge a complaint with your supervisory authority. For UK/EEA requests, contact us at the email below.
9. Children
The service is not directed at children under 16.
10. Changes
We may update this policy. We will post the new date at the top. Continued use after changes may constitute acceptance where permitted by law.
11. Contact
faztino — privacy inquiries: privacy@faztino.app. Replace this address with your company contact before production.
This is a template. Have a lawyer review your final version.