Privacy Policy

This policy applies to:

• our business customers who use BlueHatAI to power their websites (“Clients”);
• people who visit a BlueHatAI-powered website and interact with the AI (“Visitors”);
• anyone who contacts us, books a demo, or uses our website.

For Visitor information that flows through a Client's website, the Client decides why the information is collected, and BlueHatAI acts as its service provider. We handle that information on the Client's behalf and under this policy.

We collect only what we need to run the service, support our Clients, answer Visitors, create approved handoffs, and produce useful reporting.

We use information to:

• answer Visitor questions from the Client's website content and approved business material;
• move Visitors toward approved actions such as calls, forms, bookings, quotes, carts, checkouts, demos, or Rich Lead Handoffs;
• produce aggregated and anonymized Conversion Intelligence™ and Traffic Intelligence™ reporting for the Client;
• deliver a Rich Lead Handoff to the Client when a Visitor explicitly accepts one;
• operate, secure, troubleshoot, and improve the service;
• communicate with Clients and prospects about the service, with the consent required by law;
• meet legal, tax, accounting, and regulatory obligations.

We do not sell personal information. We do not use Visitor conversations for cross-site advertising or to build advertising profiles.

Visitor conversations are treated as confidential. We do not publish, reveal, rent, or sell the contents of a Visitor conversation.

Inside Client reporting, conversations are hidden or redacted where appropriate. Insights are presented as patterns and anonymized examples with direct personal identifiers removed, so a Client can understand what visitors wanted without exposing private personal details.

Client data is kept separate. One Client's content, conversations, leads, and reports are not used to answer another Client's Visitors and are not used to train another Client's AI-powered website experience.

By default, a Visitor's conversation stays private and is not sent to the Client's team as a lead summary.

A Rich Lead Handoff happens only when the Visitor explicitly accepts it in the chat or approved lead flow. By accepting, the Visitor consents to a summary of the conversation, together with the contact details they choose to provide, being shared with the Client's team so the Client can follow up.

We collect only what is needed for that follow-up. We do not invent or add personal details the Visitor did not provide.

Accepting a handoff is optional. A Visitor who declines keeps their conversation private, and no Rich Lead Handoff summary or contact details are shared through that feature.

A Visitor can also ask us or the Client to stop using or delete their personal information, subject to legal, contractual, security, and retention limits.

We share information only in limited ways:

We do not sell personal information and do not share Visitor conversations for advertising.

We keep personal information only as long as needed to provide the service, support Client reporting, maintain security, resolve disputes, and meet legal or contractual obligations.

After that, we delete the information or anonymize it.

Clients may request deletion of account data, and Visitors may request deletion of personal information, subject to legal, contractual, security, and retention requirements.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information.

These safeguards may include encryption in transit, access controls, monitoring, account permissions, and separation between Clients.

No method of transmission or storage is completely secure, but we work to protect information and limit access to those who need it to operate, support, secure, or improve the service.

Subject to applicable law, you may ask us to:

• access the personal information we hold about you;
• correct information that is inaccurate or incomplete;
• delete your personal information;
• receive a copy of certain information in a portable format;
• withdraw consent or opt out of certain uses going forward.

To make a request, contact us using the details in the Contact section.

We will verify your request before acting on it. For information tied to a specific Client's website, we may need to direct your request to that Client or coordinate with them.

We will not discriminate against you for exercising your privacy rights.

If you are in Canada, you have the right to access the personal information we hold about you and to challenge its accuracy.

We collect, use, and disclose personal information with consent that is appropriate to the sensitivity of the information, and you may withdraw consent going forward, subject to legal and contractual limits.

We send commercial electronic messages only where we have the consent required under Canada's Anti-Spam Legislation, and every marketing message includes a way to unsubscribe.

If you are a California resident, you may have the right to know what personal information we collect and how we use it, to request access and deletion, to correct inaccurate information, and to opt out of the sale or sharing of personal information.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about you.

You may exercise these rights using the Contact details below, and you may use an authorized agent to submit a request on your behalf.

We will not discriminate against you for exercising your rights.

BlueHatAI is built for businesses and is not directed to children.

We do not knowingly collect personal information from children under 13, or under the age of consent in the applicable province, state, or region.

If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

We use cookies and similar technologies that are essential to run the service and limited analytics to understand and improve performance.

We do not use Visitor conversations for cross-site advertising.

You can control or block cookies through your browser settings, though some features may not work without essential cookies.

We operate in North America, and your information may be processed and stored in the United States, Canada, or other locations where our service providers operate.

Where information moves across borders, we use appropriate safeguards consistent with applicable law.

We may update this policy from time to time.

The “Last updated” date at the top reflects the most recent version. We will post material changes on this page.

Your continued use of the service after a change means you accept the updated policy, where permitted by law.

If you have questions about this policy or want to exercise a privacy right, contact us at:

privacy@bluehatai.ai

For Visitor information tied to a specific Client's website, we may coordinate your request with that Client.

BlueHatAI™ Inc.