Privacy Policy

At Chatono, operated by Codigoplus SL, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered chatbot software and services.

By using Chatono's services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

This Privacy Policy applies to all users of the Chatono platform, including visitors to our website, registered users, and customers of our services.

We collect several types of information from and about users of our services:

1. Personal Information You Provide

When you register for an account or use our services, we may collect:

• Contact Information: Name, email address, phone number
• Business Information: Restaurant name, business address, business type
• Account Credentials: Username and password (encrypted)
• Payment Information: Payment details processed securely through Stripe (we do not store full credit card numbers)
• Restaurant Data: Menu items, pricing, reservation information, business hours

2. Automatically Collected Information

When you access or use our services, we automatically collect:

• Usage Data: Information about how you use our services, including features accessed, time spent, and interaction patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Server logs, including access times, pages viewed, and system activity
• Analytics Data: Data collected through Google Analytics and similar tools to understand user behavior and improve our services

3. Customer Interaction Data

When your customers interact with your Chatono chatbot, we collect:

• Chat conversations and messages
• Customer questions and requests
• Reservation details and preferences
• Feedback and ratings

Note: You are responsible as the data controller for informing your customers about data collection in accordance with applicable privacy laws.

We use the collected information for various purposes:

Service Provision

• To provide, maintain, and improve our chatbot services
• To process your account registration and manage your subscription
• To enable chatbot functionality for your restaurant
• To process payments through our payment processor, Stripe

Communication

• To send you service-related notifications and updates
• To respond to your inquiries and provide customer support
• To send you promotional emails about new features or offers (you can opt-out at any time)

Analytics and Improvement

• To analyze usage patterns and improve our services
• To understand user preferences and optimize features
• To develop new products and services
• To conduct research and generate statistics (anonymized)

Security and Compliance

• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our Terms and Conditions
• To protect the rights, property, and safety of Chatono, our users, and the public

We do not sell, trade, or rent your personal information to third parties.

We may share your information only in the following limited circumstances:

Service Providers

We work with trusted third-party service providers who assist us in operating our services:

• Payment Processing: Stripe processes payments on our behalf. Your payment information is handled directly by Stripe in accordance with their privacy policy and PCI-DSS standards.
• Analytics: Google Analytics helps us understand how users interact with our services. This data is anonymized and aggregated.
• Hosting: Our services are hosted on secure cloud infrastructure providers.

Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders, government requests)
• Protection of our rights, property, or safety
• Investigation of fraud or security issues
• Compliance with applicable laws and regulations

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and provide options regarding your data.

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction.

Security Measures

• Encryption of data in transit using SSL/TLS protocols
• Encryption of sensitive data at rest
• Secure password storage using industry-standard hashing algorithms
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Regular backups and disaster recovery procedures

Important: While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to maintain the highest security standards.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. When you cancel your account, we will delete your data within 30 days, except for data we are legally required to retain.

Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within 30 days of your request.

Right to Rectification

You can request that we correct any inaccurate or incomplete personal data. You can also update most of your information directly through your account settings.

Right to Erasure ("Right to be Forgotten")

You can request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes it was collected, or if you withdraw your consent.

Right to Restriction of Processing

You can request that we limit the processing of your personal data in certain situations, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You can object to the processing of your personal data for direct marketing purposes or when we process your data based on legitimate interests.

Right to Withdraw Consent

When we process your data based on your consent, you have the right to withdraw that consent at any time.

We use cookies and similar tracking technologies to enhance your experience on our platform. For detailed information about the cookies we use, please refer to our Cookie Policy.

Cookies are small text files stored on your device that help us:

• Remember your preferences and settings
• Keep you logged in to your account
• Understand how you use our services
• Improve our platform's performance and user experience

You can control cookie settings through your browser. However, disabling cookies may limit your ability to use certain features of our services.

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at info@chatono.com. We will take steps to delete such information from our systems.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes to this Privacy Policy, we will:

• Update the "Last updated" date at the top of this policy
• Notify you via email if you have an account with us
• Display a prominent notice on our website for at least 30 days

Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: