GDPR

The EU and UK General Data Protection Regulation (GDPR) applies when you, or the visitors on your website, are in the European Economic Area or the United Kingdom. This page explains how LiveChatBot supports you. It adds to our Privacy Policy and Data Processing Addendum.

1. Who is responsible for what

• Your account (your name, email, team members, billing): LiveChatBot is the controller.
• Your visitors (chats, contact details they leave, pages they view, approximate location): you are the controller and LiveChatBot is your processor. We only use this data to run the chat for you, following your instructions in the product settings.

2. What you need to do on your website

• Mention live chat in your own privacy notice: what the chat collects (messages, contact details visitors type, pages viewed, device and approximate location) and why.
• Choose a lawful basis. Most businesses rely on legitimate interests to answer visitors who start a chat, and on consent for marketing emails collected with Flows.
• If you use a cookie banner, the widget stores a visitor ID in the browser’s local storage so a chat continues across pages. Details are in our Cookie Policy.
• Switch on the AI Agent only if you are comfortable with chat text being sent to our AI provider (see Sub-processors).

3. Data subject rights

People have the right to access, correct, delete, restrict, object to and export their personal data. In LiveChatBot:

• You can see everything about a visitor on their profile (Inbox or Visitors) and copy it.
• You can block a visitor so they no longer see the chat.
• For deletion or export of a visitor’s records, email support@livechatbot.in from your account address with the visitor’s email or profile link. We act within 30 days, and usually much sooner.
• If a visitor contacts us directly, we pass the request to you, because you are their controller.

4. International transfers

We are based in India and some of our providers are in other countries, such as our AI provider in the United States. Where the GDPR requires it, transfers rely on safeguards such as the European Commission’s Standard Contractual Clauses offered by those providers. The current list is on our Sub-processors page.

5. Security and breaches

We protect data with the measures described on our Security page. If a personal data breach affects your data, we tell you without undue delay, so you can meet your own 72-hour notification duty.

6. How long data is kept

Chats and visitor data stay while your account is active, so your team can see past conversations. When you delete a website or close your account, its data is deleted from our live systems within 30 days, and from backups when they are next replaced.

7. Contact

Questions about the GDPR or data requests: support@livechatbot.in.