1. Information We Collect

We may collect the following types of data when the API is used:

a. Message Content

• Input messages sent to the chatbot via the API.
• Output (chatbot responses) generated and returned to the user.

b. Usage Metadata

• Timestamps of requests
• Request/response logs
• API key or token used
• IP address (may be anonymized)
• User agent or platform identifier

c. Account Information (API Clients)

• Business or developer name
• Contact email
• Billing and payment details (if applicable)

2. How We Use This Information

• We use the data collected via the API for:
• Generating and delivering chatbot responses.
• Maintaining and improving API performance.
• Monitoring abuse, spam, and unauthorized usage.

• Troubleshooting and support.

• Analytics (aggregate and anonymized).
• Billing and account management (for clients).

3. Data Retention

• Message Content: May be stored temporarily for processing and debugging purposes, typically for no more than [30 days].
• Logs and Metadata: Retained for up to [90 days] for operational, security, and legal compliance needs.
• We do not store personal user data longer than necessary.
• You may contact us to request deletion of logs associated with your API key, unless retention is required for legal or security purposes.

4. Data Security

• We implement industry-standard security practices, including:
• TLS/SSL encryption in transit
• Secure storage and access controls
• API key authentication
• Rate limiting and abuse detection
• However, no system is 100% secure, and we encourage API clients to secure their own environments and API keys.

5. Data Sharing & Disclosure

• We do not sell, rent, or share end-user data with third parties, except in the following cases:
• Service Providers: Trusted vendors that help us operate (e.g., cloud hosting, analytics).
• Legal Requirements: If required by law, subpoena, or court order.
• Security Incidents: If necessary to detect, prevent, or respond to fraud, abuse, or technical issues.

6. International Data Transfers

• Your data may be processed in countries where our infrastructure or service providers are located. We take steps to ensure such transfers comply with applicable data protection laws, including the GDPR and others where applicable.

7. End-User Responsibilities

• If you are an API client integrating our chatbot into your service, you are the data controller and must:
• Inform your users that chatbot interactions are processed by a third-party provider.
• Comply with relevant data privacy regulations (e.g., GDPR, CCPA).
• Avoid sending sensitive or personally identifiable information through the API unless explicitly permitted.

8. User Rights (EU/EEA & Other Jurisdictions)

• Where applicable, end users may have rights under laws such as the GDPR or CCPA, including:
• Right to access their data
• Right to correction or deletion
• Right to object to processing
• API clients are responsible for fulfilling such rights for their own users. We will assist as needed if contacted at the address below.

9. Changes to This Policy
   
   We may revise this Privacy Policy from time to time. We will notify API clients of significant changes via email or dashboard notifications. Continued use of the API after changes are made implies acceptance of the updated policy.