Privacy policy
At EchoWiseAI, your privacy is a top priority. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. If you have questions, please reach out via our Contact page.
Consent
By using our website or services, you consent to this Privacy Policy and agree to its terms.
Information we collect
The personal information we ask you to provide and the reasons will be clear at the point of collection. If you contact us directly, we may receive additional information such as your name, email address, phone number, the contents of the message and/or attachments, and any other information you provide.
- Account and team information, such as name, email, company/organization and members you invite.
- Billing information, such as billing address and transaction details. Card data is processed by our payment processor and never stored by EchoWiseAI.
- Uploaded and connected content, such as documents you upload, website URLs you add, and other knowledge sources used to train your chatbot.
- Conversation data, including prompts, responses, conversation transcripts, and lead capture details you configure (e.g., name, email, phone).
- Integration credentials, when you choose to connect services like Shopify, WooCommerce, Webhooks, or REST APIs. Sensitive fields (e.g., API keys, consumer keys/secrets) are encrypted at rest.
- Technical information, such as IP address, browser type, device information, and general log data collected for security, diagnostics, and analytics.
- Cookies and similar technologies, used to authenticate sessions, remember preferences and enhance your experience. See “Cookies” below.
How we use your information
- Provide, operate and maintain the website and services
- Authenticate users and secure accounts
- Process payments and subscriptions via our payment processor
- Understand usage, improve features and personalize the experience
- Develop new products, services, features and functionality
- Communicate with you for customer support, updates and service notices
- Detect, prevent and address fraud, abuse and technical issues
- Comply with legal obligations and enforce our terms
AI processing and model providers
To generate responses, we may send conversation context and prompts to third‑party AI model providers that you select or that are available within the product. For security and flexibility, we do not enumerate provider names here; current options are visible in‑app wherever models are selected. We do not permit providers to train their models on your data, subject to each provider’s terms.
Third‑party services and data processors
We use trusted vendors to deliver the service. These processors may handle limited personal data:
- Payment processing provider to handle payments; we do not store full card numbers.
- Hosting and deployment provider to host our applications and manage custom domains.
- Object storage and CDN providers for file storage, content delivery and caching.
- Email delivery provider for transactional emails (e.g., invitations, password resets).
- AI inference providers to generate model outputs based on your configuration.
Where required, we have appropriate data processing terms in place with these providers. For an up‑to‑date list of our sub‑processors, please refer to our Data Processing Addendum.
Log files
EchoWiseAI follows standard practices for using log files. The information collected may include IP addresses, browser type, ISP, timestamps, referring/exit pages and page interactions. This data is not linked to personally identifiable information and is used for security, diagnostics and service analytics.
Cookies
We use cookies and similar technologies to keep you signed in, remember preferences, and improve performance. You can control cookies through your browser settings. Disabling certain cookies may affect functionality.
Data retention
We retain personal data for as long as necessary to provide the services, comply with our legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account data, subject to legal and operational obligations.
Data security
We use industry‑standard safeguards to protect your information, including encryption in transit and encryption at rest for sensitive credentials you provide (such as API keys). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
International data transfers
Our service and providers may operate globally. Your information may be transferred to and processed in countries other than your own. Where required, we implement appropriate safeguards for such transfers.
CCPA privacy rights (California)
- Right to know the categories and specific pieces of personal data collected
- Right to request deletion of personal data, subject to exceptions
- Right to opt out of the sale or sharing of personal data (we do not sell personal information)
- Right to non‑discrimination for exercising your privacy rights
If you make a request, we will respond within one month. To exercise your rights, please contact us.
GDPR data protection rights (EEA, UK)
- Right of access to your personal data
- Right to rectification of inaccurate or incomplete data
- Right to erasure in certain circumstances
- Right to restrict or object to processing in certain circumstances
- Right to data portability
If you make a request, we will respond within one month. To exercise your rights, please contact us.
Children’s information
We do not knowingly collect personally identifiable information from children under 13. If you believe your child provided personal information, please contact us and we will promptly remove it.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date below.
Last updated: 8/28/2025
Questions, concerns or requests
To ask questions, exercise your rights or raise concerns, please contact us through the Contact page. We will be happy to help.