Your Data, Fully Protected

We treat privacy as our core engineering principle — transparent, compliant, and secure by design.

What we collect & why

Limited to professional info: name, work email, employer, job title. Never sold, only used to deliver our services.

  • name, work address
  • work email & phone
  • employer / job title

Cookies & website

We collect anonymous usage (IP, browser, pages) to improve your experience. Full control via our Cookie Notice.

  • log files & analytics
  • legitimate interest basis

Third‑party sharing

Only with vendors facilitating our service (US‑based cloud). We never reveal data for independent use without consent or legal requirement.

Your GDPR rights

Right to access, rectification, erasure, portability, objection — all free of charge. Contact our privacy team.

  • right to be informed
  • right to restrict processing

mechanisms

Encryption at rest & in transit, strict access control, rate limiting, domain allowlists. AWS infrastructure (us‑east‑1).

  • SOC2, GDPR compliant
  • No AI training on your data

Google Workspace APIs

Data from Google APIs is never used to train generalized AI/ML models. Strictly for feature functionality.

  • RAG architecture only
  • zero government requests
Data transfers to U.S. · Standard contractual clauses (SCCs) in place. Adequacy & Article 46 GDPR.
DPA

Since founded, Chatbase has received zero government requests for information.