RetroChatPrivacy policy
RetroChat provides live chat, a chatbot and an AI assistant that businesses ("customers") add to their websites. This policy explains what data RetroChat handles for customers who use the dashboard and for visitors who chat on a customer's website, and who helps us process it.
Visitors on a customer's website
When the chat widget loads, RetroChat stores:
- a random visitor identifier kept in your browser's local storage, so a conversation continues across pages;
- the page address, referring page, browser user agent, and an approximate country and city derived from your IP address;
- everything you send in the chat, including answers to chatbot questions and any name, email or phone number you provide.
The business that runs the website controls this data and decides how long to keep it; RetroChat processes it on their behalf. To access or delete your chat data, contact that business. RetroChat does not sell visitor data or use it for advertising.
Customers using the dashboard
We store your name, email address, a salted hash of your password, your workspace settings and content, and a session cookie that keeps you signed in. We use this to provide the service, to send emails you need (such as invitations, password resets and alerts when visitors are waiting), and to keep RetroChat secure.
Feature requests
If you send us an idea from our website or your dashboard, we keep it together with your email (and name, if you give it) so we can reply and let you know when it is released. We don't use it for marketing. Ask us at hello@theretrochat.com and we'll delete it.
Payments
Orders are processed by Lemon Squeezy, our Merchant of Record. Lemon Squeezy collects your payment and billing details directly; we never see or store full card numbers. We receive what we need to run your subscription: your name, email, billing country, the plan you bought, and its status and renewal dates. See Lemon Squeezy's privacy policy.
AI assistant
On plans with the AI assistant, a visitor's messages and the knowledge a customer provides (including files they upload and web pages they ask us to import) are sent to an AI model hosted on Cloudflare (Workers AI) to write a reply. They are used only to produce that reply, not to train models.
Service providers
- Cloudflare: hosting, database, real-time messaging, AI and privacy-friendly website analytics (no cookies, no cross-site tracking).
- Google Analytics: on our own website (theretrochat.com), and only if you allow it in the consent banner, to understand which pages people visit.
- consentmanager: shows the consent banner on our website and remembers your choice.
- Resend: sending our emails.
- Lemon Squeezy: payments, invoices and taxes.
These providers process data only to provide their services to us. Data may be processed outside your country; we rely on these providers' safeguards for international transfers.
Retention and deletion
- Visitors who never start a chat are removed after 30 days.
- Customers can delete individual conversations and contacts, a whole workspace, or their account from the dashboard. Deleted data is removed from the live database.
- Payment and tax records are kept by Lemon Squeezy for as long as the law requires.
- The public demo at /demo.html is cleared automatically.
Cookies and local storage
The dashboard uses one essential session cookie. The widget uses local storage only for the visitor identifier and chat preferences. Neither is used for tracking or advertising.
On our own website, a consent banner asks before any analytics cookies are set. If you agree, Google Analytics uses cookies to count visits and see which pages are useful; it is not used for advertising. You can change your choice at any time from the banner's settings link. The chat widget that our customers add to their websites does not include Google Analytics or this banner.
Security
Data is encrypted in transit, passwords are stored as salted hashes, and access inside RetroChat is limited to the people a workspace owner invites.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, or to object to how it's used. Customers can do most of this in the dashboard; for anything else email us. Website visitors should first contact the business whose website they chatted on.
Children
RetroChat is a business service and isn't directed at children under 16.
Changes
We'll update this page and its date when our practices change, and tell account owners by email about important changes.
Contact
Email hello@theretrochat.com with any privacy question.