1. What this policy covers
This policy explains what information Chatfarm (“we”) collects, why we collect it, and the choices you have. It applies to chatfarm.co, every assistant hosted on a Chatfarm subdomain or custom domain, and every Chatfarm widget embedded on a third-party site.
2. Information we collect
- Account data — name, email, organisation, and authentication tokens for users who sign up.
- Assistant content — system prompts, uploaded documents, crawled or sitemap pages, and configuration you provide.
- Conversations — messages exchanged with an assistant, plus a session identifier so we can deliver replies and let you resume the chat.
- Widget visitor data — a random visitor identifier stored in the browser, user-agent, referring page, and the messages sent through the embed. Widgets do not require an account unless the assistant owner turns on sign-in.
- Operational data — IP address, request timestamps, and similar metadata needed to operate the Service, prevent abuse, and meet legal obligations.
3. How we use it
- To deliver the Service and replies from AI assistants.
- To maintain conversation history so a visitor can resume on the same device (or across devices if they verify an email).
- To ingest authorized knowledge sources you ask us to fetch.
- To prevent fraud, abuse, and security incidents.
- To comply with legal obligations.
We do not sell your data, and we do not train foundation models on your private content.
4. AI providers and other processors
AI replies are generated by upstream model providers (for example OpenAI, Anthropic, or OpenRouter). When a message is sent, the message plus the assistant’s instructions and retrieved knowledge excerpts are forwarded to the provider configured by the assistant owner. Those providers have their own privacy terms.
We use Supabase for data storage and authentication, and Vercel for hosting. Both process data on our behalf under data-processing agreements.
5. Cookies and similar technologies
We use cookies and local storage to keep you signed in, remember appearance and language, bind a widget visitor to a session, and keep the chat working. We do not use third-party advertising cookies. See the Cookie Policy for details.
6. Data retention
Conversation history is retained for as long as the owning assistant exists, or until it is deleted. Account data is retained while the account is active. You can ask us to delete your account and associated data at any time.
7. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights write to accforgelabs@protonmail.com.
8. International transfers
Our infrastructure runs primarily in the United States and the European Union. By using the Service you consent to your data being processed in those regions.
9. Changes
We may update this policy from time to time. Material changes will be announced through the Service or by email.
10. Contact
Questions about this policy can be sent to accforgelabs@protonmail.com. See also our Terms of Service and Cookie Policy.