Chatty.ie

Privacy policy

Last updated: 17 October 2026

This policy explains what personal data Chatty.ie collects when you use our chatbot service, how we use it, and the rights you have over it. We keep it as plain as we can.

1. Who we are

Chatty.ie provides an AI chatbot that website owners add to their own websites. You can contact us at eric@his.ie.

We act in two roles:

  • As controller for the personal data of people who create an account with us (our customers).
  • As processor for the personal data of visitors who chat with a chatbot on a customer's website. The website owner decides why and how that data is used and is the controller. We process it only on their behalf and instructions.

2. What we collect

Customers (account holders):

  • Your name and email address, and your password, which we store only as a one-way hash, never in readable form.
  • The chatbot settings and business information you enter, your website addresses, and the email address you choose for receiving leads and bookings.
  • Your plan and how many chat messages your chatbot has used each month.

Visitors who use a chatbot:

  • The messages you type and the chatbot's replies.
  • A random visitor ID, stored in your browser, so the chatbot can remember your conversation.
  • The page of the website where the chat took place (the page path only, without the website address or any query details).
  • A one-way scrambled version (a hash) of your IP address, used to prevent abuse. We do not store your IP address itself.
  • Your name, phone number and email address, if you give them in the chat or in a form the chatbot shows.
  • If you book a callback: the time you choose, your name, phone number, email address (if given) and any note you add.

Security data: when someone tries to log in, we record the attempt (against a hashed IP address and the email used) so that we can slow down password guessing.

3. Cookies and browser storage

We do not use advertising or tracking cookies and we do not run third-party analytics on the chatbot.

  • Customer login: when you log in to your dashboard we use a session cookie so that we know you are signed in. It is needed for the login to work.
  • Chat on a customer's website: the chatbot stores a random visitor ID and a note that you have completed its details form in your browser's local storage. They are used only to run the chat you asked for and to remember your conversation. You can clear them at any time in your browser settings, which starts a new conversation.

4. How we use personal data, and why

  • To provide the service (our contract with customers): running accounts and chatbots, answering visitors' questions, emailing leads and booking details to the customer, and sending visitors a booking confirmation when they give their email.
  • To keep the service secure (our legitimate interest): preventing abuse, limiting repeated bookings and login attempts, and fixing faults.
  • To meet legal obligations, such as tax and accounting records once we take payments.
  • With your consent, where the law requires it. You can withdraw consent at any time.

For visitor data, the customer who owns the website is responsible for having a lawful basis for using the chatbot and for what they do with the details a visitor shares.

5. AI processing

Chatbot replies are written by an AI model provided by OpenAI. To produce a reply, we send OpenAI the customer's business information and instructions, the recent messages in the conversation, and, where the visitor gave it, their name. You are chatting with an AI assistant, not a person, and its answers can sometimes be wrong.

OpenAI states that data sent through its API is not used to train its models unless the customer opts in, and that it may keep API inputs and outputs for up to 30 days to provide the service and detect abuse. Please do not share sensitive information in the chat, such as health details, financial account numbers or passwords.

6. Who we share data with

We do not sell personal data. We share it only with:

  • The customer whose website you used, who receives conversations, leads and bookings.
  • OpenAI, to generate chatbot replies (see section 5).
  • Our hosting and email providers, who store our data and deliver our emails.
  • Authorities, where the law requires it.

7. Transfers outside the EEA

Some of our providers, including OpenAI, may process data outside the European Economic Area. Where that happens we rely on the safeguards the GDPR requires, such as an adequacy decision or Standard Contractual Clauses.

8. How long we keep data

  • Account data: for as long as the account is open, and removed promptly after you ask us to close it, unless the law requires us to keep some records.
  • Conversations, leads and bookings: until the customer deletes them in their dashboard or the account is closed.
  • Security records of login attempts: only as long as needed to protect against password guessing.

9. Security

We use encrypted connections (HTTPS), store passwords only as hashes, store IP addresses only as hashes, and limit access to customer data to the customer who owns it. No system is perfectly secure, but we take reasonable steps to protect your data.

10. Your rights

Under data protection law you can ask to:

  • see the personal data held about you and get a copy;
  • have inaccurate data corrected;
  • have your data deleted;
  • restrict or object to how it is used;
  • receive your data in a portable format; and
  • withdraw consent where we rely on it.

If you used a chatbot on someone else's website, please contact that business first, as they control your chat data. You can also contact us at eric@his.ie and we will help or pass your request on.

If you are unhappy with how your data is handled, you have the right to complain to the Data Protection Commission, Ireland's data protection authority, at dataprotection.ie.

11. For customers: your responsibilities

If you add the chatbot to your website, you are responsible for:

  • telling your visitors that they are chatting with an AI assistant and linking to this policy or your own;
  • having a lawful basis for collecting leads and bookings, and for contacting people who share their details;
  • mentioning the chatbot's browser storage in your own cookie or privacy notice if you need to; and
  • not using the chatbot to collect sensitive information.

If you need a data processing agreement with us, contact us at eric@his.ie.

12. Children

Our service is not aimed at children under 16, and we do not knowingly collect their personal data.

13. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed, and we will tell customers about important changes by email.

14. Contact

Questions about this policy or your data: eric@his.ie.