Radioactive Labs ("we", "us", or "our") operates Universal Chatbot (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
1. Information We Collect
1.1 Account Information
When you create an account or use the Service, we may collect:
- Contact information - Email address, name, phone number
- Password - Stored as a cryptographic hash (never in plain text)
- Profile information - Any additional information you choose to provide
- Billing information - Payment details and billing address (processed securely by Paystack; we do not store full card numbers)
1.2 Organization Data
If you create or join an organization (team account), we store:
- Organization name
- Membership relationships and roles
1.3 Conversation Data
When end users interact with chatbots you deploy, we collect:
- Messages - Full conversation history between users and your chatbot
- Session data - Conversation state and flow progress
- Technical data - IP address, browser user agent, timestamps
- Platform identifiers - User IDs from connected platforms (e.g., Intercom contact IDs)
1.4 Knowledge Base Content
When you upload documents or provide URLs for your knowledge base, we store:
- Document content and metadata
- Processed text chunks for search
- Vector embeddings for semantic search
1.5 Analytics Data
We collect analytics to improve our Service:
- Visit information - Pages visited, referrer, landing page
- Device information - Browser type, operating system, device type
- Location data - Approximate location derived from IP address (city/region/country level)
- UTM parameters - Campaign tracking data from URLs
1.6 Cookies
We use cookies for:
- Authentication - Session cookies to keep you logged in
- Chatbot tracking - Anonymous identifiers to maintain conversation continuity (9-month expiration)
- Analytics - Visit and visitor tokens for usage analytics
2. How We Use Your Information
We use collected information to:
- Provide and maintain the Service
- Process and respond to chatbot conversations
- Generate AI-powered responses using your knowledge base
- Provide analytics and insights about chatbot performance
- Send service-related communications (account verification, security alerts)
- Improve and optimize the Service
- Detect and prevent fraud or abuse
3. Third-Party Services
We use the following third-party services to provide our Service:
3.1 AI/Language Model Providers
We use Google Gemini to power AI features including intent recognition, content generation, and knowledge base queries. When AI features are used:
- Conversation messages and context are sent to Google's API
- Relevant knowledge base content may be included for context
- AI responses are stored in our database
Google's use of this data is governed by their Privacy Policy and Data Processing Terms.
3.2 Platform Integrations
When you connect third-party platforms, we access data according to the permissions you grant:
Intercom
When connected, we access:
- Conversation messages and metadata
- Contact information (name, email)
- Admin and team information for routing
- Tags for categorization
We send bot responses and perform actions (tagging, assignment) on your behalf.
Future Integrations
We plan to support additional platforms including WhatsApp, Telegram, and Slack. Similar data access patterns will apply, and this policy will be updated accordingly.
3.3 Document Processing
We use a self-hosted document processing service to convert uploaded documents to searchable text. Documents are processed on our infrastructure and are not shared with external services.
3.4 Payment Processing
We use Paystack to process payments. When you make a payment:
- Payment card details are collected and processed directly by Paystack
- We do not store full card numbers on our servers
- We receive transaction confirmations and billing information necessary to provide the Service
Paystack's use of your data is governed by their Privacy Policy.
3.5 Geolocation
We use a locally-hosted MaxMind GeoLite2 database for IP-based geolocation. No data is sent to external geolocation services.
4. Data Retention
We retain different types of data for different periods:
- Account data - Retained until you delete your account, plus 90 days to allow for recovery and resolve any pending matters
- Conversation data - Retained for 24 months from the conversation date, then automatically deleted. You may delete conversations earlier through the Service.
- Knowledge base content - Retained until you delete the documents or your account
- Analytics data - Retained for 24 months, then anonymized or deleted
- Billing and financial records - Retained for 6 years as required by law
- Cookies - Session cookies expire when you close your browser; chatbot tracking cookies expire after 9 months
When you delete your account, we will delete or anonymize your personal data within 90 days, except for billing records we are legally required to retain.
5. Data Security
We implement security measures including:
- Encryption in transit - All data transmitted over HTTPS
- Credential encryption - OAuth tokens, API keys, and user-provided credentials encrypted at rest
- Password hashing - Passwords stored using bcrypt cryptographic hashing
- Multi-tenant isolation - Organization data strictly isolated between accounts
- Secure cookies - HttpOnly and Secure flags on sensitive cookies
6. Data Sharing
We do not sell your personal information. We share data only:
- With your consent - When you connect third-party integrations
- With service providers - Third-party AI providers as described above
- For legal compliance - When required by law or to protect our rights
- In business transfers - If we merge with or are acquired by another company
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access - Request a copy of your personal data
- Correction - Request correction of inaccurate data
- Deletion - Request deletion of your data
- Portability - Request your data in a portable format
- Objection - Object to certain processing activities
- Withdraw consent - Withdraw consent for optional processing
To exercise these rights, contact us at the address below.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.
9. Children's Privacy
Our Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:
Radioactive Labs
Email: privacy@universalchatbot.com