Last updated: 09.07.2026
Contact: service@holderchat.com
HolderChat (“we”, “us”, “our”) provides an AI chatbot platform at holderchat.com. This Privacy Policy explains how we collect, use, and protect personal data when you use our website, dashboard, and related services.
1. Who This Policy Applies To
This policy applies to:
- Account holders who register and manage chatbots on HolderChat;
- Visitors to holderchat.com;
- End users who interact with chat widgets powered by HolderChat on our customers’ websites (in those cases, the website owner is usually the data controller and HolderChat acts as a data processor on their behalf).
If you use HolderChat on your own website, you are responsible for informing your visitors and obtaining any required consents under applicable law.
2. What We Collect
Account and billing data
- Email address (registration, login, notifications, support)
- Name and account details you provide
- Billing and subscription information (payments are processed by Stripe; we do not store full payment card details)
Content and service data
- Website URLs, pages, posts, or files you submit to build a chatbot knowledge base
- Chatbot configuration and settings (including privacy/anonymization settings)
- Conversation messages between end users and your chatbot
- Technical logs (IP address, browser type, timestamps, error logs) for security and operation
Cookies and similar technologies
We use cookies and local storage, for example:
- Authentication and session cookies
- Chat session identifiers (e.g. to maintain a conversation)
- Cookie consent preferences
See Section 6 for more details.
3. How We Use Your Data
We use personal data to:
- Provide, operate, and maintain the HolderChat service
- Create, train, and run AI chatbots based on content you provide
- Process subscriptions and payments
- Send service-related communications (updates, security notices, support)
- Improve reliability, security, and performance
- Comply with legal obligations
AI processing: To generate chatbot responses, we may send conversation content and related context to third-party AI providers (such as OpenAI). Where enabled in your account, we anonymize personal data before sending it to AI providers.
4. Legal Basis (EEA/UK Users)
Where GDPR applies, we rely on:
- Contract — to provide the service you signed up for
- Legitimate interests — security, fraud prevention, service improvement (balanced against your rights)
- Consent — where required (e.g. non-essential cookies)
- Legal obligation — where the law requires us to process or retain data
5. Data Sharing and Sub-processors
We do not sell your personal data.
We share data only as needed to operate the service, including with:
| Provider | Purpose |
|---|---|
| OpenAI (and similar AI providers) | AI-generated chatbot responses |
| Stripe | Payment processing |
| Hosting / infrastructure providers | Running our platform |
| Analytics tools (if enabled) | Understanding site usage |
These providers process data under their own terms and, where applicable, data processing agreements. We require appropriate safeguards for international transfers (e.g. Standard Contractual Clauses) where required by law.
We may also disclose data if required by law or to protect our rights, users, or security.
6. Cookies
We use cookies to keep you logged in, run the chat widget, and remember your cookie preferences. Non-essential cookies (e.g. analytics) are used only where permitted by law and, where required, after your consent.
You can control cookies through your browser settings. Blocking essential cookies may limit some features.
7. Data Retention
We retain personal data only as long as necessary to provide the service, meet legal obligations, resolve disputes, and enforce our agreements. When you delete your account or request deletion, we will delete or anonymize your data within a reasonable period, unless we must retain certain records by law.
Conversation history retention may depend on your plan and settings.
8. International Transfers
Your data may be processed in countries outside your country of residence (including the United States), where data protection laws may differ. We implement appropriate safeguards as required by applicable law.
9. Your Rights
If you are in the EEA, UK, or another jurisdiction with similar laws, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion (“right to be forgotten”)
- Restrict or object to certain processing
- Data portability
- Withdraw consent (where processing is based on consent)
- Lodge a complaint with your local data protection authority
To exercise your rights, contact us at service@holderchat.com. We may need to verify your identity before responding.
10. Security
We use technical and organizational measures to protect personal data, including encryption in transit (HTTPS), access controls, and anonymization options for chat data. No method of transmission or storage is 100% secure.
11. Children
HolderChat is not intended for children under 16. We do not knowingly collect personal data from children.
12. Beta Service
HolderChat is currently offered in beta. Features, pricing, and terms may change. Use of the service during beta is at your own discretion. We recommend not relying on the service for critical or legally sensitive use cases without appropriate review.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes may be communicated by email or through the service where appropriate.
14. Contact
HolderChat
Email: service@holderchat.com