Privacy Policy

CHIC EXPERT LTD, trading as ReceptionIQ ("we", "us"), provides an AI receptionist that answers messages, captures leads and books appointments on behalf of businesses ("Customers"). This policy explains what we collect, why, and what rights you have.

1. Data we collect

• Account data: name, email address, password hash, business name, industry, country, timezone.
• Business content: knowledge base documents, FAQs, services, pricing and availability you add.
• Conversation data: messages exchanged between your customers and the AI across the website widget, WhatsApp, Instagram and Messenger, plus contact details your customers provide.
• Integration tokens: access tokens for Meta channels and Google Calendar, stored encrypted and used only to send and receive messages on your behalf.
• Billing data: subscription status and plan. Card details are handled by our payment provider and never touch our servers.
• Technical data: log records, IP address, timestamps and error diagnostics.

2. How we use data

• To operate the service: generating AI replies, capturing leads, scheduling appointments and syncing channels.
• To secure the platform: fraud prevention, rate limiting, abuse detection and audit logs.
• To bill subscriptions and provide support.
• To improve reliability and quality of the product in aggregate. We do not sell personal data, and we do not use your customer conversations to train third-party foundation models.

3. Processors we rely on

• Cloud hosting and database infrastructure for storage and authentication.
• AI model providers for generating replies from the content of a conversation.
• Meta Platforms for WhatsApp, Instagram and Messenger delivery.
• Google, where you connect Calendar for appointment sync.
• Stripe, Inc. for payment processing, subscription management, receipts, invoicing and tax determination.

4. Roles

For data about your own end customers, you are the data controller and ReceptionIQ is a processor acting on your instructions. For your account and billing data, we are the controller.

5. Retention

Conversation and lead data is retained for as long as your account is active. On account deletion we remove your workspace data within 30 days, except records we must keep for legal, tax or fraud-prevention purposes.

6. Security

Data is encrypted in transit and at rest. Access to workspace records is enforced at the database level with row-level security so that only members of your business can read them. Integration secrets are stored in a managed secret store and are never exposed to the browser.

7. Your rights

Depending on where you live, you may request access, correction, export, restriction or deletion of your personal data, and object to certain processing. Contact us and we will respond within 30 days.

8. International transfers

Our infrastructure and processors may store or process data outside your country. Where required we rely on standard contractual clauses to protect those transfers.

9. Children

ReceptionIQ is a business tool and is not directed at anyone under 16.

10. Changes

We will post any material change to this policy on this page and update the date above. Continued use of the service after a change means you accept the updated policy.

11. Contact

Privacy questions: privacy@receptioniq.com