Privacy Policy
This policy explains how Chatvora collects, uses, stores and protects personal data.
1. Controller & contact
Controller: Chatvora (Netherlands, sole proprietorship). Website: chatvora.org. Contact: [email protected].
2. Data we collect
- Account data: email, password hash, profile settings.
- Usage data: chat messages, conversation metadata, feature usage.
- Security data: IP and access logs for abuse prevention.
- Billing data: payment references/status from Mollie (no full card data stored by Chatvora).
- Support data: contact and support messages.
3. Purposes & legal basis
- Service delivery and authentication (contract performance).
- Billing administration (contract + legal obligation).
- Security and abuse prevention (legitimate interest).
- Transactional emails (legitimate interest/contract).
- Marketing emails only with opt-in consent.
4. Processors & sharing
Main processors include OpenAI (AI processing), Mollie (payments), Hetzner (hosting) and configured mail provider(s). We do not sell personal data for advertising.
5. Retention
- Account data: while account is active and during deletion window.
- Chat data: until user deletion or account deletion flow.
- Payment records: up to 7 years (tax/accounting obligations).
- Security logs: typically up to 90 days unless needed for incidents/legal hold.
6. International transfers
Where processing involves non-EEA providers, we rely on appropriate transfer safeguards such as Standard Contractual Clauses and contractual processor controls.
7. Security measures
We use TLS in transit, hashed passwords, CSRF controls, role-based access controls, logging and abuse protections. No internet service can guarantee absolute security.
8. Your rights (GDPR)
You may request access, rectification, deletion, restriction, portability, objection, and consent withdrawal where applicable. Contact [email protected]. You can also lodge a complaint with Autoriteit Persoonsgegevens.
9. Cookies
We use essential cookies for secure operation. Optional cookies are consent-based. See Cookie Policy.
10. Children
Chatvora is not intended for children under 16.
11. Changes
We may update this policy and publish the revision date on this page.