Privacy Policy

ChatterBuster ("we," "us," or "our") operates the website chatterbuster.com and the ChatterBuster SaaS platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

We are committed to protecting your privacy and complying with applicable data protection regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2.1 Account Information

When you create an account, we collect:

• Name and email address
• Profile information
• Account credentials (stored securely via Supabase Auth)

2.2 Fanvue Integration Data

When you connect your Fanvue account via OAuth 2.0, we access the following data in accordance with the scopes you authorize:

• Chat messages and conversation logs — used for AI-powered quality analysis, SOP compliance checking, and alert generation.
• Subscriber/Fan analytics — used for revenue tracking, whale identification, and performance metrics.
• Fan metadata (handles, display names) — used for attribution and alert context.

We access this data exclusively through Fanvue's official API. We do not scrape, crawl, or use unapproved methods to collect data from Fanvue.

2.3 Payment Information

We do not directly collect or store payment card details. All payment processing is handled by Paddle.com, our Merchant of Record. Paddle collects and processes payment information in accordance with PCI DSS standards. Please refer to Paddle's Privacy Policy for details.

2.4 Usage Data

We automatically collect:

• Browser type, device information, and IP address
• Pages visited and features used within the Service
• Timestamps and session duration

2.5 Uploaded Content

SOPs, training documents, and other files you upload to the Service are stored securely and used solely to power the AI coaching and compliance features.

We use your information to:

• Provide and maintain the Service, including AI coaching, alert generation, and analytics.
• Analyze chat conversations against your SOPs for quality and compliance monitoring.
• Generate performance reports and chatter evaluations.
• Send you service-related notifications (alerts, billing updates).
• Improve and optimize the Service.
• Comply with legal obligations.

We do not sell your personal data. We share data only with the following categories of third parties:

• Paddle.com — Payment processing (Merchant of Record).
• Supabase — Database and authentication infrastructure.
• Google Gemini API — AI processing for coaching responses and analysis. Chat data sent to Gemini is processed according to Google's AI terms.
• Fanvue — Data accessed via their API as authorized by you.
• Google Drive — SOP synchronization if you choose to connect a Google Drive folder.

• Account data is retained as long as your account is active.
• Fanvue chat data is cached for analysis purposes and retained for up to 90 days. You may request deletion at any time.
• SOPs and uploaded documents are retained until you delete them or close your account.
• Analytics and aggregated data may be retained in anonymized form for service improvement.
• Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

We implement industry-standard security measures to protect your data, including:

• All connections are encrypted via HTTPS/TLS.
• API credentials and OAuth tokens are stored securely and never exposed to end users.
• Access to production systems follows least-privilege principles.
• We conduct regular security reviews and vulnerability assessments.

In the event of a data breach affecting your personal data, we will notify you and relevant authorities (including Fanvue) within 72 hours as required by GDPR.

Depending on your jurisdiction, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request a machine-readable copy of your data.
• Objection: Object to processing of your data for certain purposes.
• Restriction: Request restriction of processing under certain circumstances.
• Withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at support@chatterbuster.com. We will respond to data subject access requests (DSARs) within 30 days.

You may revoke ChatterBuster's access to your Fanvue account at any time by:

• Navigating to your Fanvue account settings → "Third Party Apps Consent" and removing ChatterBuster.
• Disconnecting Fanvue from your ChatterBuster dashboard settings.

Upon revocation, we will cease accessing new data from Fanvue. Previously cached data will be deleted within 30 days unless you request immediate deletion.

We use essential cookies required for the Service to function (authentication, session management). We do not use third-party advertising or tracking cookies.

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will delete it promptly.

Your data may be transferred to and processed in countries outside your country of residence (including the United States). We ensure appropriate safeguards are in place for such transfers in compliance with GDPR, including standard contractual clauses where applicable.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Continued use after changes constitutes acceptance of the revised policy.

For privacy-related questions, data subject access requests, or complaints, contact us at:

Email: support@chatterbuster.com