Last updated 3 September 2026
Privacy notice
What we hold, why we hold it, who else touches it and how to get rid of it. Written to be read rather than to be complied with.
Who we are
ChatForSite operates chatfor.site. For questions about your data, or to exercise any of the rights below, write to privacy@chatfor.site.
Two different relationships
This matters, because it decides who answers to whom.
- Your account. We decide what to do with it, so we are the controller. That is your email address, your assistants and their settings, and your billing record.
- Your visitors’ data. What people type into your assistant, and any name and email it captures, belongs to your relationship with them. You are the controller and we are your processor: we act on your instructions and for no purpose of our own. You are responsible for telling your visitors about it in your own privacy notice.
What we hold
| What | Why |
|---|---|
| Your email address | To sign you in. There is no password to store. |
| Documents you upload | The file name, the text extracted from it, and a numeric index of that text so it can be searched. |
| Conversations | The questions visitors ask your assistant and the answers it gave, so you can read back what it has been saying. |
| Contacts it captures | A name and email, only where you have switched that on. They are yours, and we do not contact them. |
| Answers used this month | To apply your plan’s allowance. |
| Billing record | A customer and subscription reference, the status and the renewal date. No card details: those never reach us. |
| IP addresses | Held briefly against a counter to stop one source flooding the service. Not used to identify anyone. |
What we do not do
- We do not use your documents or your conversations to train any model.
- We run no analytics, no tracking pixels and no advertising. There is nothing on this site watching you read it.
- We do not sell or rent anything to anybody.
- We set one kind of cookie, the one that keeps you signed in. Your theme choice is stored in your own browser and never sent to us. The chat widget keeps a conversation reference in session storage on your visitor’s browser, which disappears when they close the tab.
Our lawful bases
We process your account data to perform our contract with you. Keeping the service secure and preventing abuse is our legitimate interest, and we have weighed it against the very limited data it needs. Where we are your processor, the lawful basis for your visitors’ data is one you choose and tell them about.
Who else touches it
These are our sub-processors. They act on our instructions and each is bound by terms that require them to protect what they handle.
| Supplier | What they do and where |
|---|---|
| Vercel | Runs the application. Functions execute in London. |
| Supabase | Database and sign-in. Data is stored in Ireland. |
| Anthropic | Writes the answers. Receives the visitor’s question, the excerpts retrieved from your documents, and the recent conversation. Under their API terms this is not used for training. |
| Resend | Sends sign-in emails. Receives the email address only. |
| Polar | Takes payments as merchant of record, and holds the card details we never see. |
Reading and indexing your documents happens on our own servers. Nothing is sent to a third-party embedding service, so the full text of a document leaves us only as the small excerpts needed to answer a particular question.
Some suppliers process data outside the UK. Where they do, the transfer relies on the safeguards the law provides for it, such as approved standard contractual clauses.
How long we keep it
| What | How long |
|---|---|
| Everything in your account | Until you delete it or close the account. Both are immediate. |
| IP counters | Until the window closes. Swept nightly. |
| Billing records | Six years, because tax law requires it. They hold no personal data once the account is gone. |
Your rights
You can ask for a copy of your data, ask us to correct it, ask us to delete it, object to what we are doing with it, ask us to restrict it, or ask for it in a portable form. Write to privacy@chatfor.site and we will answer within a month.
Deletion needs no request: the billing page closes the account and removes everything in it straight away. There is no waiting list and no backup you can be recovered from afterwards, so take a copy of anything you want first.
If you think we have got something wrong you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first so we can put it right.
Security
Traffic is encrypted in transit and data is encrypted at rest by our suppliers. Every tenant’s rows are separated in the database and enforced there rather than only in application code, so one account cannot read another’s. Sign-in is a one-time link, so there is no password of yours for anyone to steal from us.
No system is perfect. If a breach ever put your rights at risk we will tell the Information Commissioner within 72 hours, and tell you without undue delay.
Changes
If we change how any of this works we will update this page and change the date at the top. Where a change is significant we will tell you rather than rely on you noticing.