Privacy

How Atal AI handles personal data — both for businesses who use it, and for visitors who chat with a bot on their website.

Last updated 3 September 2026

Two kinds of people, two different roles

Atal AI is a chat assistant that businesses embed on their own websites. That means personal data reaches us in two ways, and our responsibilities differ.

If you are a customer — a business with an Atal AI account — we are the controller of your account data: your name, email, company name, and billing records.

If you are a visitor who chatted with a bot on a business's website, that business is the controller and we are its processor. We hold your messages on their behalf and act on their instructions. Requests to see or delete that data are best made to them; if you come to us, we will pass it on and help them answer.

What we collect from visitors

• The messages you send and the answers given. Stored so the business can read the conversation and improve its bot.
• A random visitor id kept in your browser's local storage. It carries no name and is not shared between websites. It exists so a conversation survives a page reload. Clearing your browser data removes it, and ending a chat in the widget replaces it.
• Contact details, only if you give them. A business can switch on a form asking for a name, email address or phone number. It is skippable unless you have asked to speak to a person, in which case it is needed to reply to you at all. When you submit it we record that you consented and when.
• Your IP address, browser and country, recorded once when a conversation starts. The business you are talking to can see them, in the same way they would see a caller's number — it is how their team knows whether you are in a different time zone before offering to ring you back. The country comes from your IP address and is often approximate.

Your IP address is personal data and we treat it as such. It is kept with the conversation and deleted with it, on the same schedule as everything else on this page — there is no separate log that outlives the chat.

We do not use advertising cookies, we do not track you across websites, and we do not sell anything to anyone.

Email, and the links in it

If you ask to speak to a person, the business may reply by email. Those emails can contain two kinds of link, and both are keys:

• A reply address so your answer comes back into the conversation.
• A resume link that reopens the chat where you left it.

Anyone holding one of those links can read and continue that conversation, so forward them only to people you would be happy to share the chat with.

What we collect from customers

• Account details: name, email, company, and a hashed password.
• The documents, pages and text you upload for your bot to answer from — including anything personal you choose to put in them.
• Billing records. Card details are never stored by us; they are held by Stripe, PayPal or Payssion, whichever you pay through.

Who else sees it

We use a small number of processors, and only for the job named:

• OpenRouter and the model providers behind it, to generate answers. Your messages and the relevant parts of your documents are sent for that purpose.
• A mail provider — Postmark, Mailgun, Amazon SES or ZeptoMail — to send and receive email.
• A payment provider — Stripe, PayPal or Payssion — for customer billing only. Visitors never reach one.

How long we keep it

Conversations and captured contacts are kept until the business deletes them or closes its account. A business can delete any conversation or contact at any time from its dashboard, and deleting an account removes its data.

Your rights

If you are in the UK or EU you can ask for a copy of your data, ask for it to be corrected or deleted, and object to how it is used. For visitor data, ask the business whose website you were on. For account data, write to us.

[email protected] — we answer within 30 days, usually sooner. If you are not satisfied you can complain to your data protection authority.

Changes

If we change how any of this works we will update the date at the top, and tell customers by email when the change is material.