Privacy statement

1. About ChatDAX

ChatDAX is a digital platform that helps users gather information, compare options and make informed decisions. This statement describes which personal data we process when you use chatdax.com, create an account, sign in or contact us.

For privacy questions, contact us at privacy@chatdax.com.

2. Personal data we process

• account data, such as your name, email address and a technical user identifier;
• data from your chosen sign-in provider, such as Google, Microsoft, Apple or Facebook;
• session and security data, including session tokens, timestamps and technical logs;
• information you enter in conversations, forms, preferences or report requests;
• temporary conversation and quality data needed to analyse and improve the operation, reliability and quality of ChatDAX;
• communications you send to us;
• technical data such as browser type, device category, IP address and error reports for security and reliable operation;
• privacy preferences, including selected categories, policy version and the time of your choice.

We never receive the password for your external account.

3. Signing in with Google and other providers

When you sign in with Google, ChatDAX generally receives your name, email address, profile picture and a unique account identifier. We use this data only to authenticate you, link your account and prevent abuse. The same principles apply to Microsoft, Apple and Facebook.

4. Purposes and legal bases

We process personal data for account management, authentication, session management, service delivery, support, security, fraud prevention, quality and reliability analysis, service improvement and compliance with legal obligations. Conversations may be analysed temporarily to identify errors, recurring quality problems and opportunities for improvement. Depending on the situation, we rely on performance of a contract, consent, legitimate interests or a legal obligation. Preference storage, analytics and marketing/affiliate conversion measurement are activated only after your explicit consent.

5. Cookies, local storage and privacy choices

ChatDAX uses necessary functional and security cookies for sign-in and session management. The authentication cookie is inaccessible to JavaScript and is sent under appropriate browser restrictions. A session may remain valid for up to 30 days unless you sign out earlier or the session is revoked.

Your privacy choice is stored locally in your browser under a versioned preference key. It contains only the selected categories, policy version and a timestamp. The preference remains until you change it, clear browser storage or a material policy change requires renewed consent.

The strictly necessary category is always active. Preferences, analytics and marketing are off by default. You can accept all, allow only necessary processing or choose individual settings. The website remains usable when you refuse non-essential measurement.

6. Storage inventory

• Authentication session: necessary secure cookie; purpose: sign-in and session security; maximum validity: 30 days or earlier on sign-out/revocation.
• Chat and journey state: sessionStorage for visitors and server-side conversation history for signed-in users; purpose: resume an explicitly started conversation. For visitors, local state ends with the browser session; for signed-in users, the account-bound conversation-history retention period applies.
• Temporary conversation quality copy: for visitors and signed-in users, a limited copy of conversation content, conversation state and error/quality information may be processed temporarily in separate protected storage to analyse the operation, relevance, reliability and quality of ChatDAX. Anonymous conversations receive a random pseudonymous session or conversation identifier and are not linked to an account identity. The raw quality copy is deleted after analysis and is also subject to a technically enforced short maximum retention period.
• Derived quality lessons: after analysis, privacy-minimised failure signatures, reason codes, counts, regression signals and quality lessons may be retained longer to identify recurring problems and improve future responses. These derived records do not contain the full raw conversation or a direct user identity by default.
• Privacy preferences: versioned first-party cookie; purpose: apply and withdraw consent; maximum retention: 12 months, or earlier after a change, browser clearing or a new policy version.
• Language and interface preferences: only when functionally necessary and privacy-preserving; purpose: show the requested interface; retention: until changed or browser storage is cleared.
• Analytics and commerce events: no local or external transmission before consent; after consent, only bounded first-party events without the full destination URL or direct identity.

7. Privacy signals and withdrawal

ChatDAX respects supported Global Privacy Control and Do Not Track signals by blocking non-essential measurement. You can change your choice at any time through the permanently accessible Privacy settings button. Withdrawal is applied immediately to preference storage and new analytics and marketing events.

8. Affiliate and conversion measurement

When you consent, ChatDAX may process bounded partner-click and conversion data to attribute revenue. These events may contain a normalized partner identity, placement, result position and destination host. ChatDAX does not store the full outgoing URL, URL credentials or a direct user identity for this purpose. Commercial compensation does not change the substantive ranking.

9. Sharing with service providers

We do not sell personal data. Data may be processed by necessary hosting, email, authentication, security, AI and infrastructure providers under appropriate agreements. Data may also be disclosed where required by law.

10. International transfers

Some suppliers or sign-in providers may process data outside the European Economic Area. Where necessary, we use appropriate safeguards such as an adequacy decision or standard contractual clauses.

11. Retention periods

We do not keep personal data longer than necessary. Account data is generally retained while your account is active. Security and technical logs are kept for a limited period unless a legal obligation, dispute or incident requires longer retention. Temporary conversation quality copies are deleted after analysis and also have a technically enforced short maximum retention period in case processing cannot be completed. Privacy-minimised derived quality lessons and failure signatures may be retained longer while they remain necessary and useful for reliability, quality improvement and regression prevention. Browser storage follows the specific periods in the storage inventory above.

12. Security

We use appropriate technical and organisational measures, including secure connections, protected session cookies, access controls, input validation, separate storage of secret configuration, bounded pseudonymisation and deletion of temporary quality data, and fail-closed processing of non-essential measurement.

13. Your privacy rights

You can request access, correction, deletion, restriction, portability or object to processing, and you can withdraw previously given consent. Send your request to privacy@chatdax.com. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

14. Minors

ChatDAX is not intended to collect children’s personal data without appropriate consent. Contact us if you believe this has nevertheless happened.

15. Automated assistance and quality improvement

ChatDAX may use artificial intelligence for analyses, recommendations, reports and quality control. Conversations and technical outcomes may be assessed automatically on a temporary basis to identify errors, insufficiently relevant results, recurring quality problems and possible improvements. Where possible, only bounded privacy-minimised lessons or failure signatures are derived; the temporary raw quality copy is then deleted. These outputs are supportive. We do not make decisions with legal effects solely by automated means unless this is clearly disclosed and a valid legal basis applies.

16. Changes and contact

We may update this statement when our service, technology or legal obligations change. If non-essential measurement changes materially, we will ask you to make a new choice. The current version is always available on this page. Privacy questions can be sent to privacy@chatdax.com.