1. Introduction

Welcome to Conmoji (“we,” “us,” “our”), a platform for building, deploying, and analyzing AI-powered chatbots. Your privacy is important to us. This Privacy Policy describes how we collect, use, and protect your personal data and the choices you have regarding it.

2. Who We Are

Conmoji B.V. (in oprichting)
Theresiastraat, 2593AS
The Hague, The Netherlands
Email: privacy@conmoji.com

• We act as: Data Controller for users of our platform.
• Data Processor for data collected via chatbots embedded by our customers.

We follow the guidelines of the Autoriteit Persoonsgegevens and comply with the General Data Protection Regulation (GDPR).

3. Information We Collect

We aim to collect the minimum data necessary to deliver and improve our services.

• A. Account & Authentication
  • Email address
  • Name (optional)
  • Hashed password
  • Session/authentication tokens (e.g., JWT)
• B. Chatbot Configuration
  • Chatbot name, color, and logo
  • Behavior settings, persona definitions, welcome messages
  • Uploaded files (e.g., logos)
• C. Chat Session & Message Data
  • Unique session ID
  • Message content (user and chatbot)
  • Message timestamp and role (user or assistant)
  • Chatbot ID linked to session
  • Conversation settings and history
• D. Technical Logs
  • IP address, browser type, device type
  • Timestamps (logins, messages, settings changes)

4. Data We Do Not Collect

We do not collect:

• Payment or billing data (handled via Stripe)
• End-user personal data beyond what's entered in chat
• Biometric, health, or sensitive categories — unless explicitly entered in conversation
• Location or GPS data
• Behavior tracking via third-party analytics
• Chat data for advertising, profiling, or resale

5. Cookies

We use functional cookies for login sessions, user preferences, and chatbot embedding.
We do not use tracking cookies or third-party analytics at this time.
You can control cookies via your browser settings.

6. How We Use Your Data

• Authenticate and manage your account
• Configure and deliver your chatbot(s)
• Display conversation logs and analytics
• Troubleshoot issues and ensure security
• Communicate with you about product updates or onboarding (only if opted in)
• Comply with legal obligations

We do not use your data for unrelated marketing or profiling.

7. Legal Bases for Processing (GDPR)

• Contract: To provide the services you requested.
• Legitimate Interest: For improving functionality and securing the platform.
• Consent: For optional features like newsletters or referrals.
• Legal Obligation: If required to comply with laws or legal requests.

8. Data Sharing

We never sell your data. We only share data with:

• Service Providers under data processing agreements:
  • Render.com (hosting)
  • OpenAI (AI model API)
  • Gmail (transactional emails)
  • Make.com (automation)
  • Stripe (payment processing)
  • Supabase (for image saving)
• Authorities, if legally required
• Successors, in case of acquisition or merger (with notice)
• You, upon request

9. AI Processing & Prompt Control

Chatbot responses are generated using OpenAI models. We do not log conversations with OpenAI, and conversations are not stored or reused by them.

• You control:
  • What your bot says (via configuration)
  • What data it collects (e.g., appointment details, questions)
  • When and whether a session is deleted

You can update or delete messages and configurations at any time via your dashboard.

10. International Data Transfers

Your data may be processed or stored outside the EEA (e.g., in the United States).
We implement safeguards such as Standard Contractual Clauses (SCCs) where applicable to ensure equivalent protection.

11. Data Retention

You can request deletion at any time.

12. Your Rights (under GDPR)

You may exercise the following rights:

• Access – See what personal data we hold
• Rectification – Fix incorrect or incomplete data
• Erasure – Request deletion of your data
• Restriction – Temporarily pause data processing
• Portability – Request your data in machine-readable form
• Objection – To processing based on our legitimate interest
• Withdraw consent – For any features you previously opted into

Contact us at privacy@conmoji.com to exercise any of these rights.

13. Children’s Privacy

Conmoji is not intended for children under 16. We do not knowingly collect their data. If we learn that a child has submitted data, we will delete it immediately.

14. Third-Party Links

Our site or chatbot may link to third-party websites. We are not responsible for their privacy policies. Always review their terms before sharing data.

15. Changes to This Policy

We may update this Privacy Policy from time to time.
Material changes will be communicated via email or dashboard notification.
The latest version will always be available at conmoji.com/privacy.

16. Contact

For any questions or data requests:
Conmoji B.V. (in oprichting)
Theresiastraat, 2593AS
The Hague, The Netherlands
📧 privacy@conmoji.com