Privacy Policy

1. Data Controller

Personal data processed in connection with AiWebLifting is controlled by:

2. Information We Collect

We prioritize data minimization. When visitors interact with the AI assistant widget on a client website, we collect:

• Conversation Text & Optional Voice/Files: Messages exchanged with the AI assistant (and voice audio or files only when you actively choose to use them) in order to generate relevant replies and assist navigation.
• Contact Inquiries: Contact details (such as name, email address, phone number, or company name) only when a visitor voluntarily submits them to request a callback, appointment, or follow-up.
• Technical Metadata: Standard technical information necessary to deliver the web service, including anonymized session identifiers and browser language preference.

3. Sub-Processors and Third-Party Services

To provide the automated assistant, we utilize carefully selected service providers:

• Google Cloud / Firebase & Gemini API: Hosts application services and Firestore databases and processes conversation inputs as an AI technical sub-processor under the Google Cloud Data Processing Addendum and EU Standard Contractual Clauses (SCCs).
• Stripe: Acts as an independent payment processor for subscription payments. Payment card details are handled directly by Stripe and are never stored on our servers.
• Resend: Handles transactional notifications, delivering lead and inquiry emails to website owners.
• Twilio: Processes optional AI voice phone calls and SMS summaries where phone features are used.

4. Data Storage and Retention

Application containers and Firestore records run on Google Cloud infrastructure (`us-central1`) governed by Google Cloud's Data Processing Addendum and European Commission Standard Contractual Clauses (SCCs) where transfers outside the EEA occur. Conversation transcripts and visitor question logs are automatically deleted after 90 days, or earlier whenever the website owner or visitor requests deletion.

Visitor questions and usage data

When a visitor writes to the assistant on our client's website, we store the question (with email addresses and phone numbers removed), the page and the language, to answer it and to send the business a monthly report. We also store a one-way hash of the visitor's IP address, which changes every month, only to protect against abuse. These records are deleted after 90 days. Contact details are stored only when the visitor gives them. Our client (the website owner) is the controller of this data; AiWebLifting processes it on their behalf.

5. Your Rights and Deletion Requests

Under applicable European data protection laws (GDPR), you have the right to access the personal data held about you, request correction of inaccurate information, or request the permanent deletion of your data. To request access or deletion of your records, please contact us directly at contact@aiweblifting.com. We will process and confirm your request promptly.

6. Contact Us

If you have any questions or concerns regarding our privacy practices, you can reach our team at contact@aiweblifting.com.