Privacy Policy | LiteChat.io

Introduction

This Privacy Policy explains how LiteChat.io collects, uses, stores, and protects your personal data when you use our livechat system and visit our website. This document also describes your data protection rights and how to exercise them.

Using our services means accepting the practices described in this Privacy Policy.

Data Controller

The controller of your personal data is LiteChat.io based in Poland. You can contact us regarding data protection matters at: [email protected]

Types of Data We Collect

We collect the following categories of personal data:

Account data: first name, last name, email address, password (in encrypted form), company details (if provided).

Payment data: transaction information, payment history. Full payment card details are not stored on our servers; they are processed by trusted payment providers.

Technical data: IP address, browser type, device information, login data, service usage statistics.

Conversation data: content of conversations conducted through our livechat system, files exchanged during conversations.

End-user data: information that may be collected about visitors to websites where LiteChat.io is implemented, such as IP address, browser data, visit time, and conversation content.

Purposes and Legal Bases for Data Processing

Service provision: we process data to fulfill our contract and provide our livechat services (legal basis: performance of a contract).

Account management: managing your account, verifying identity, and ensuring security (legal basis: performance of a contract, legitimate interest).

Payment processing: handling transactions, issuing invoices, processing refunds (legal basis: performance of a contract, legal obligation).

Communication: responding to inquiries, informing about changes to services, sending technical notifications (legal basis: performance of a contract, legitimate interest).

Service improvement: analyzing the use of our services to optimize and develop them (legal basis: legitimate interest).

Marketing: sending information about our services, promotions, and news if you have consented to it (legal basis: consent).

Data Retention Period

We retain account data for the duration of your use of our services and for the period necessary for tax and legal purposes after account deletion.

Conversation data is retained according to the settings selected by the client in the administrative panel, by default for a period of 12 months.

Technical and analytical data is retained for a period not exceeding 24 months.

Marketing data is retained until consent is withdrawn.

Data Sharing

Your data may be shared with the following categories of recipients:

Service providers: companies providing hosting, data storage, payment processing, data analysis, and other necessary services.

Business partners: entities that collaborate with us in delivering services or functionalities.

Legal authorities: data may be shared with law enforcement or other public authorities when required by applicable law.

All data recipients are obligated to ensure an appropriate level of personal data protection in accordance with applicable regulations.

International Transfers

Some data may be transferred to countries outside the European Economic Area (EEA). In such cases, we ensure that data transfers are conducted in accordance with appropriate safeguards, such as standard contractual clauses approved by the European Commission, binding corporate rules, or other mechanisms compliant with GDPR.

Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, loss, or destruction. These measures include, among others:

- Encryption of data at rest and during transmission
- Regular security tests and audits
- Data access control
- Procedures for handling data breaches
- Regular staff training on data protection

Your Rights

In accordance with data protection regulations, you have the following rights:

Right of access: you can obtain information about your personal data and the purposes of processing.

Right to rectification: you can request correction of inaccurate or incomplete data.

Right to erasure: in certain circumstances, you can request the deletion of your data (right to be forgotten).

Right to restriction of processing: you can request restriction of processing your data in specific situations.

Right to data portability: you can receive your data in a structured, commonly used format or request its transfer to another controller.

Right to object: you can object to the processing of your data based on legitimate interest.

Right to withdraw consent: if processing is based on consent, you can withdraw it at any time.

To exercise these rights, contact us at [email protected]. We will try to respond to your request within 30 days.

Cookies and Similar Technologies

Our website and services use cookies and similar technologies to collect and store information. Detailed information about the cookies we use, the purposes of their use, and ways to manage them can be found in our Cookie Policy.

Childrens Data

Our services are not intended for individuals under the age of 16, and we do not knowingly collect personal data from such individuals. If you are a parent or guardian and believe that your child has provided us with their personal data, please contact us to have this information removed.

Changes to the Privacy Policy

We may update this Privacy Policy from time to time. We will inform you about any significant changes via our website or directly by email. We recommend regularly reviewing the Privacy Policy to stay informed about our data protection practices.

Contact and Complaints

If you have questions, comments, or complaints regarding this Privacy Policy or the processing of your personal data, please contact us at [email protected].

You also have the right to lodge a complaint with the appropriate data protection supervisory authority in the country where you live, work, or where the alleged infringement occurred.