Last modified: January 17th, 2025
Please read this Privacy Policy (“Privacy Policy”) before using our Service including the Website, Widget andAPI (as defined below), referred to collectively as the “Service”. This PrivacyPolicy governs the types of information and data we collect and how we use and share this information. Your access to and use of the Service are available for your use only on the condition that you agree to the Terms of Service available under the following address: https://www.quickchat.ai/terms (“Terms of Service”) which include the terms of the Privacy Policy set forth below. Incentivai Inc. (“Company”) operates the Service. The address of the Corporation's registered office is 251 Little Falls Drive, Wilmington, New Castle, DE 19808, United States. We use your data to provide and improve Service. By using Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, the terms used in this Privacy Policy have the same meanings as in our Terms of Service. For more information about our compliance with the Data Privacy Framework (DPF), please visit the DPF website (https://www.dataprivacyframework.gov), DPF list (https://www.dataprivacyframework.gov/list), and our alternative dispute resolution provider (https://www.jamsadr.com/).
API means Quickchat application programming interface to be integrated with the User’s software.
CCPA means California Consumer Privacy Act.
Cookies are small files stored on yourDevice.
Device means a computer or a mobile device.
Data Controller means a natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be processed. For the purpose of this Privacy Policy, we are a Data Controller of your data.
Data Processors (or Service Providers) means any natural or legal person who processes the data on behalf of the DataController. We may use the services of various Service Providers in order to process your data more effectively.
Data Subject is any living individual who is the subject of Personal Data.
Personal Data means data about a living individual who can be identified from those data (or from those and otherinformation either in our possession or likely to come into our possession).
Service means together the Website, Widget and/or the API (depending on the scope dedicated to a given User).
Usage Data is data collected automatically either generated by the use of Service or from Service infrastructure itself (for example, the duration of a page visit).
User is the individual using our Service.User corresponds to the Data Subject, who is the subject of Personal Data.
Website means web pages located at quickchat.ai.
Widget means a Quickchat widget that maybe implemented to the User’s website.
Special Categories of Personal Data means data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation.
Data Privacy Framework (DPF) refers to the framework that provides guidelines for protecting personal data transferred from the European Union andSwitzerland to the United States, ensuring compliance with privacy principles.
Data Privacy Framework List refers to the list of organizations that have self-certified to the DPF principles, available on the DPF website.
Alternative Dispute Resolution (ADR) Provider refers to the independent recourse mechanism available to address complaints and resolve disputes under the DPF principles.
The controller of your Personal Datails: Incentivai Inc. 251 Little Falls Drive, Wilmington, New Castle, DE 19808,United States.
Incentivai Inc. determines the purposes and means of processing your Personal Data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the Data Privacy Framework (DPF). As the Data Controller, Incentivai Inc.ensures that your personal data is processed lawfully, fairly, and transparently.
Incentivai Inc. cooperates with OpenAI OpCoLLC to develop and improve our products. In this context, personal data may beprocessed by OpenAI as a data processor on behalf of Incentivai Inc., ensuring compliance with all relevant data protection laws and frameworks, including the DPF. For more information, please refer to: https://openai.com/policies/row-privacy-policy/
For more information about our compliance with the Data Privacy Framework, please visit the DPF website (https://www.dataprivacyframework.gov), DPF list (https://www.dataprivacyframework.gov/list), and our alternative dispute resolution provider (https://www.jamsadr.com/).
We collect several different types of information for various purposes to provide and improve our Service to you.
Personal Data
While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”), including:
Special Categories of Personal Data:
We may also process special categories of personal data, including data concerning health, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, and data concerning a natural person's sex life or sexual orientation. This data will only be processed with your explicit consent or under another valid legal basis as required by applicable law.
This data will only be processed with your explicit consent or under another valid legal basis as required by applicable law.
Usage Data
We may also collect information that your browser sends whenever you visit our Service or when you access Service by or through a Device (“Usage Data”). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique Device identifiers and other diagnostic data. When you access Service with a Device, this UsageData may include information such as the type of Device you use, your Device unique ID, the IP address of your Device, your operating system, the type ofInternet browser you use, unique Device identifiers and other diagnostic data.
Tracking Cookies Data
We use cookies and similar tracking technologies to track the activity on our Service and we hold certain information. Cookies are files with a small amount of data which may include anonymous unique identifier. Cookies are sent to your browser from a website and stored on your Device. Other tracking technologies are also used such as beacons, tags and scripts to collect and track information and to improve and analyze our Service. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. Examples of Cookies we use:
Cooperation with OpenAI
We cooperate with OpenAI to develop and improve our products. This cooperation involves using OpenAI's API to enhance our services while ensuring compliance with all relevant data protection laws and frameworks, including the Data Privacy Framework (DPF).
Incentivai Inc. uses the collected Personal Data for various purposes:
We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy.
Personal Data
We will retain your Personal Data for the duration of your use of the Service and as necessary to fulfill the purposes described in this Privacy Policy. This may include retaining yourPersonal Data to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.
Special Categories of Personal Data
Special categories of personal data will be retained only as long as necessary for the specific purpose for which the data was collected and processed and will be securely deleted once the purpose has been fulfilled or upon withdrawal of consent, unless a longer retention period is required or permitted by law.
Usage Data
We will retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.
Data Retained Upon Consent
Personal Data processed upon your consent will be stored until the relevant consent is withdrawn and for any period thereafter as required by applicable law or necessary for the establishment, exercise, or defense of legal claims.
Legal and Regulatory Obligations
We may retain your Personal Data for longer periods where we are required to do so to comply with legal or regulatory obligations, including but not limited to tax, accounting, and anti-money laundering regulations.
Data Related to Disputes andEnforcement
We will retain your Personal Data for as long as necessary to resolve disputes and enforce our agreements and policies.
Your information, including Personal Data, may be transferred to – and maintained on – computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to United States and process it there. The Company will take all the steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information. When we transfer your Personal Data to other countries, we will protect that Personal Data as described in this PrivacyPolicy and in accordance with applicable law. We use contractual protections for the transfer of Personal Data among various jurisdictions (the European Commission’s standard contractual clauses referred to in Article 46. 2 c) of the GDPR). Personal Data transferred to third parties will be restricted to the purposes explicitly stated in this Privacy Policy, such as providing and improving our services or ensuring compliance with legal obligations. Any onward transfer will require equivalent levels of protection, and Personal Data will not be shared with third parties unless necessary for fulfilling these purposes.
Adequate Controls and Safeguards
The Company will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. No transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place, including the security of your data and other personal information.
Legal Basis for Transfer
When we transfer your Personal Data to other countries, we will protect that Personal Data as described in this Privacy Policy and in accordance with applicable law. The legal basis for international transfers of Personal Data includes, but is not limited to:
Onward Transfer Restrictions
Personal Data transferred to third parties will be restricted to the purposes explicitly stated, such as providing and improving our services and ensuring compliance with legal obligations. Any onward transfer will require equivalent levels of protection as provided by us under this policy.
We may disclose Personal Data you provide:
We do not sell or otherwise share your Personal Data, except as described in this Privacy Policy.
The security of your data is of paramount importance to us. We implement a variety of security measures to maintain the safety of your Personal Data. These measures include, but are not limited to, the following:
Technical Measures:
Administrative Measures:
Physical Measures:
Third-Party Security:
Ongoing Security Practices:
Cooperation with OpenAI
We cooperate with OpenAI to develop and improve our products. This cooperation involves using OpenAI's API to enhance our services while ensuring compliance with all relevant data protection laws and frameworks, including the Data Privacy Framework (DPF). OpenAI implements robust security measures to protect Personal Data processed on our behalf. Please note that while we strive to use commercially acceptable means to protect your Personal Data, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.
If you are a resident of the European Union (EU) or the European Economic Area (EEA), you have certain data protection rights covered by the General Data Protection Regulation (GDPR). We aim to take reasonable steps to allow you to exercise these rights regarding your Personal Data. Your rights under GDPR include:
If you wish to execute any of the above-mentioned rights, please email us at contact@quickchat.ai. Please note that we may ask you to verify your identity before responding to such requests. Please note, we may not able to provide Service without some necessary data.
Definitions
Consumer (user) for the purposes of theCCPA means a natural person who is a resident of California.
Personal Data for the purposes of the CCPA means any information that identifies, relates to, describes or is capable of being associated with, or could reasonably be associated, directly or indirectly, with the Consumer.
Sale for the purposes of the CCPA means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, Consumer’s Personal Data to another business or a third party for monetary or other valuable consideration.
You have the following data protection rights under the CCPA:
To exercise any of your rights under the CCPA, and if you are a California resident, you may contact us at: contact@quickchat.ai. Only you, or a person registered with the California Secretary of State whom you authorize to act on your behalf, may make a verifiable request regarding your Personal Data.
Collection and disclosure of PersonalData under the CCPA
We may collect, and may have collected, the following categories of Personal Data from California residents within the last twelve (12) months:
We may use or disclose, and may have used or disclosed within the last twelve (12) months the categories of Personal Data previously identified in this Privacy Policy.
We may employ third party companies and individuals to facilitate our Service (“Service Providers”), provide Service on our behalf, perform Service-related services or assist us in analysing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
We may use third-party Service Providers to monitor and analyze the use of our Service.
Google Analytics
Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualise and personalise the ads of its own advertising network. For more information on the privacy practices of Google, please visit the Google PrivacyTerms web page: https://policies.google.com/privacy?hl=en. We also encourage you to review the Google's policy for safeguarding your data: https://support.google.com/analytics/answer/6004245.
Mixpanel
Mixpanel is provided by Mixpanel Inc.You can prevent Mixpanel from using your information for analytics purposes by opting-out. To opt-out of Mixpanel service, please visit this page: https://mixpanel.com/optout/. For more information on what type of information Mixpanel collects, please visit the Terms of Use page of Mixpanel: https://mixpanel.com/terms/.
Datadog
Datadog is a monitoring and security platform for cloud applications provided by Datadog Inc. Datadog uses the data and logs collected to make our application and infrastructure more secure and reliable. For more information on the privacy practices of Datadog, please visit the Datadog Privacy we page: https://www.datadoghq.com/privacy/ and review Datadog's Privacy Policy: https://www.datadoghq.com/legal/privacy/.
BigQuery
BigQuery is a fully managed enterprise data warehouse provided by Google Cloud Platform that helps us manage and analyze our application data. For more information on the data security and governance practices of BigQuery, please visit the BigQuery page: https://cloud.google.com/bigquery/docs/data-governance and review Google CloudPlatform's Privacy Policy page: https://cloud.google.com/terms/cloud-privacy-notice.
We may provide paid products and/or services within Service. In that case, we use third-party services for payment processing (e.g. payment processors). We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their PrivacyPolicy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information. The payment processors we work with are:
Our Service may contain links to other sites that are not operated by us. If you click a third party link, you will be directed to that third party's site. We strongly advise you to review thePrivacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Our Service does not address anyone under the age of 16 (“Children”). We do not knowingly collect personally identifiable information from anyone under the age of 16. If you are a parent or guardian and you are aware that your Child has provided us with Personal Data, please contact us. If we become aware that we have collected PersonalData from children without verification of parental consent, we take steps to remove that information from our servers.
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new PrivacyPolicy on this page and updating “effective date” at the top of this page, unless another type of notice is required by the applicable law. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. By continuing to use our Service or providing us with Personal Data after we have posted an updated Privacy Policy, or notified you if applicable, you consent to the revised Privacy Policy and practices described in it.
If you have any questions about this Privacy Policy, please contact us at contact@quickchat.ai.
Addendum to Privacy Policy for Canada
Personal Data maintained and processed by our affiliates and third-party service providers in the U.S. and other foreign jurisdictions may be subject to disclosure pursuant to a lawful access request by U.S. or foreign courts or government authorities. We will not provide your information to third parties for marketing purposes without your prior consent. For more information about our privacy practices; to access, update or correct inaccuracies in your personal information; or if you have a question or complaint about the manner in which we or our service providers treat your personal information, please contact us on data indicated in section “Contact us” above.
Addendum to Privacy Policy for Mexico
To the extent Mexican privacy laws or regulations apply, the following additional Mexico-specific provisions apply and shall prevail over conflicting provisions in the Privacy Policy.
How We Use the Information We Obtain
In addition, we may use your PersonalData for the other purposes listed in the “Use of Data” section of the Privacy Policy, which may be considered secondary purposes under Mexican law. We do not use or share personal payment or financial information except in connection with the processing of payments or where there is another legal basis. You may withdraw your consent to our processing of your Personal Data by contacting us as indicated in the “How to Contact Us” section of the Privacy Policy. If you withdraw your consent for us to process your Personal Data for one of the primary purposes indicated above, then in some situations we may not be able to provide the service, though we may still engage in certain processing authorized by law. The Company may also use data and related data analysis in other Company products and services.
Information We Share
We may share your Personal Data as provided in the Privacy Policy, but to the extent permitted by law, you may withdraw your consent to this sharing by contacting us as indicated in the “How to Contact Us” section of the Privacy Policy. We also share the related information we obtain with our customers, partners, affiliates, and joint marketing partners. These entities, which collectively are referred to here as the “Business Partners” may use the information for the purposes described in this Privacy Policy. We may also share the information with our BusinessPartners and other third parties for warranty, troubleshooting or maintenance purposes, or for improving the design and performance of their products and services.
Requests for Access, Correction,Cancellation, Objection or Consent Withdrawal
In addition to any rights granted in the Privacy Policy, you may ask us to cancel your Personal Data to the extent permitted by law by contacting us as indicated in the “How to Contact Us” section of the Privacy Policy. Following a valid cancellation request, we may hold the Personal Data for the duration and purposes permitted by law before deleting it. We will answer your requests to access, correct or cancel your Personal Data or to object or withdraw your consent to our processing of your Personal Data within 20 business days from the date we receive your complete request or as provided by law. To be considered complete, your request must include your full name and contact address, and a clear and detailed description of your request.
Addendum to Privacy Policy for Japan
The Company complies with Japanese laws and regulations, including the Act on the Protection of Personal Information. The Company is primarily responsible for the management of the Personal Data that is jointly used with our affiliates or third parties. We will not provide your information to third parties for marketing purposes without your prior consent.
Addendum to Privacy Policy for Republic of Korea
Except as otherwise required by law, consumer Personal Data is securely disposed of without delay when (i) the consumer revokes his or her consent for our use of the information, (ii) the purpose of our collection and use of the Personal Data has been accomplished or (iii) the legal retention period has expired. If applicable law requires the preservation of Personal Data that otherwise would be disposed of, the PersonalData is transferred to a separate database and then disposed of after the period determined by the applicable law. Personal Data is disposed of using a method that is reasonably likely to prevent the Personal Data from being restored or reused. We will not provide your Personal Data to third parties in violation of law (such as without your consent, where consent is required). For the purposes stated in the Privacy Policy, Company or our affiliates are responsible for the handling of Personal Data with respect to services provided in Republic of Korea.