Privacy Policy — Greetler

1. Introduction

Greetler ("we," "us," or "our") provides an AI-powered chat concierge service for law firms. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website (greetler.com), our application (app.greetler.com), and our embeddable chat widget (collectively, the "Service").

2. Information We Collect

From Law Firm Customers ("Firms"):

Email address and website URL provided during signup
Firm website content that is publicly available (crawled during onboarding)
Portal settings and configuration preferences

From Website Visitors ("End Users"):

Chat messages sent through the widget
Contact information voluntarily provided in lead capture forms (name, email, phone)
Anonymous session identifiers (no persistent tracking cookies)

Automatically Collected:

Usage analytics (widget opens, messages sent, booking clicks)
Server logs (IP address, browser type, request timestamps)

3. How We Use Information

To provide, maintain, and improve the Service
To generate AI-powered responses to visitor questions using firm-specific content
To capture and forward leads to the appropriate firm
To send transactional emails (portal links, lead notifications, weekly reports)
To produce anonymized, aggregated analytics for firms

4. AI Processing

Chat messages are processed by third-party AI models (currently OpenAI) to generate responses. We do not use conversation data to train AI models. Firm content and visitor messages are sent to the AI provider solely for real-time response generation.

5. Data Sharing

We do not sell personal information. We share data only with:

The subscribing law firm: Visitor conversations and leads are shared with the firm whose website the visitor was on
AI providers: Messages are processed by OpenAI for response generation
Payment processor: Paddle handles billing; we do not store payment card details
As required by law: We may disclose information in response to valid legal process

6. Data Retention

Conversation data is retained for as long as the firm's account is active. Firms can export or request deletion of their data at any time. Upon account termination, data is deleted within 30 days.

7. Security

We use industry-standard measures to protect data, including encrypted connections (TLS), access controls, and secure infrastructure. However, no method of transmission or storage is 100% secure.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data. To exercise these rights, contact us at privacy@greetler.com.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify firms of material changes via email. The "Last updated" date at the top indicates when the policy was last revised.

11. Contact Us

If you have questions about this Privacy Policy, contact us at privacy@greetler.com.