Privacy Policy

1. Controller

Aktief Bouwen B.V. (trading as AnsaChat), Celsiusstraat 32a, 1704 RW Heerhugowaard, Netherlands, is the data controller for the personal data described in this policy. Contact us at support@ansachat.app. KVK: 37162480. BTW: NL822129516B01.

2. Data we process, by role

Account holders (you, if you sign up for AnsaChat): your email address and password, the workspace content you add (knowledge base material, Q&A pairs, uploaded files), and your billing status. We never see or store your card number — Stripe holds that directly on our behalf. If you subscribe, Stripe also collects the billing details you enter at its checkout page (such as your name, address, and payment method — card numbers never touch our servers), needed for invoicing and to calculate VAT.

End-visitors(people chatting through a customer's widget): the messages they send, an email address if they choose to leave one, any files they choose to attach, and a random identifier stored in their browser's localStorage so we can recognize their conversation on return visits. We also process, for each conversation: the page URL where the chat happened (this can include query parameters), the referring page and any utm campaign parameters, coarse location (country/city, derived from the visitor's IP via our hosting provider's geolocation headers) and browser/device information including the user agent string, and the visitor's IP address itself, which we use to enforce rate limits and prevent abuse — rate-limiting records are kept only for that purpose. Live "visitor is viewing this page" indicators shown to your team are reduced further, to just the site origin and path. We don't use tracking cookies for end-visitors, and we don't use any of this to build cross-site advertising or tracking profiles.

3. Why we process it

We process this data to deliver the service you or the website you're chatting with have asked for — operating the chat widget, generating AI answers, and running the team inbox — which is necessary to perform our contract with our customers.

We also process a limited amount of data for abuse prevention (rate limiting, fraud and misuse detection), which we do on the basis of our legitimate interest in keeping the service secure and functional.

4. Sub-processors

We use the following processors to run the service:

5. International transfers

Most of our processors keep data in the EU. AI answer generation uses Anthropic, which is based in the United States. Where data is transferred there, it's covered by Anthropic's Data Processing Addendum and Standard Contractual Clauses (SCCs), the standard EU mechanism for transferring personal data outside the EU lawfully. If you accept cookies on our website, Google may also process ad-measurement data in the United States under the EU–US Data Privacy Framework.

6. Retention

We keep account and workspace data for as long as the workspace is active. If you request deletion — of your account, a workspace, or a specific visitor's data — you can do it yourself from the dashboard (Settings → Danger zone, or the visitor's profile), and we delete it immediately. Stripe retains billing records (invoices, payment history) after deletion, as we're legally required to keep those for tax purposes.

7. Your rights

You have the right to access, correct, or erase your personal data, to receive a copy of it in a portable format, and to object to certain processing. To exercise any of these rights, email support@ansachat.app. Deletion and data export are also self-service: account holders can export or delete workspace and visitor data directly from the dashboard.

If you're not satisfied with how we've handled a request, you have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.

8. Cookies

The AnsaChat dashboard uses strictly-necessary cookies to keep you signed in. The chat widget itself doesn't use cookies at all; the identifier it stores in localStorage is set by our chat window and reused when the same visitor returns, and we don't use it to build cross-site advertising or tracking profiles.

On our own website (AnsaChat's homepage and marketing pages), we ask before setting any other cookie. If you click "Accept", we load Google Ads conversion measurement: Google sets cookies (named _gcl_…) that let us see whether someone who clicked one of our ads later started a trial. We don't use them for personalised advertising. If you click "Decline", nothing is loaded. Your choice is remembered in your browser's localStorage, and you can change it at any time via "Cookie settings" in the footer. The legal basis is your consent.

9. Changes to this policy

We may update this policy from time to time. Each version is dated at the top of this page, so you can always see when it last changed.