Privacy Policy

Overview

This Privacy Policy applies to our website, admin dashboard, and chatbot widget. Depending on how you use HikariFloww, we may process information about you as an account holder (business user) or as a visitor interacting with a chatbot.

If you’re chatting with a business’s chatbot, that business may be the primary party responsible for your conversation data. In those cases, your request may need to go to that business directly.

Who we are (Data Controller)

HikariFloww is operated by [LEGAL ENTITY NAME], registered in [COUNTRY].

We act as the data controller for personal data processed in connection with our website, admin dashboard, and chatbot platform.

If you are interacting with a chatbot operated by one of our business customers, that business may act as a separate data controller for conversation data collected through their chatbot.

For privacy-related questions, contact us at support@chatbot.com.

Data we collect

Note: Payments are processed by payment providers (e.g. Stripe). We don’t store full card numbers on our servers.

How we use data

• Provide and operate the service (accounts, chatbot delivery, billing).
• Maintain safety and security, prevent abuse, and troubleshoot issues.
• Improve product features and usability (e.g. analytics and reporting).
• Communicate with you about support requests, service updates, and important notices.
• Comply with legal obligations where required.

Legal basis for processing

We process personal data under the following legal bases:

• Contract – to provide and operate the HikariFloww service you sign up for
• Legitimate interests – to maintain security, prevent abuse, and improve our product in ways that do not override your rights
• Legal obligations – where we are required to comply with applicable laws

When we share data

We do not sell personal information. We share data only in limited situations:

• Service providers: infrastructure, database/authentication, email delivery, analytics, payments, and AI inference.
• Your instructions: when you connect integrations or export data.
• Legal reasons: to comply with law, enforce agreements, or protect users and the platform.

Examples of common providers include Supabase (database/auth), Stripe (billing), Resend (email), and Groq (AI inference).

International data transfers

Some of our service providers may process data outside the UK or European Economic Area. Where this occurs, we rely on appropriate safeguards such as contractual protections and equivalent legal mechanisms to ensure your data remains protected.

AI processing

HikariFloww uses AI models to generate chatbot responses. This means conversation content may be sent to an AI provider for processing and returned as an answer.

• We don’t need or want sensitive personal data in chatbot messages.
• Don’t share payment details, passwords, or other sensitive information via chat.
• Businesses can review conversation history in the admin dashboard for quality and training purposes.

Cookies & analytics

We use strictly necessary cookies or similar technologies to operate the service, including authentication, security, and session management.

We do not use cookies or similar technologies for third-party advertising or cross-site tracking.

We collect aggregated, non-identifying usage metrics to understand how the platform is used and to improve performance (for example, page views or feature usage totals). These metrics:

• Do not use analytics cookies
• Do not track individual users across sites
• Do not create persistent identifiers for analytics purposes

If we introduce optional cookies or tracking technologies in the future, we will update this policy and, where required, request your consent before they are used.

You can control cookies through your browser settings. Blocking strictly necessary cookies may affect functionality.

Data retention

We keep information only as long as necessary to provide the service, comply with legal requirements, resolve disputes, and enforce agreements.

If you would like data deleted, contact us and we’ll help you understand what can be removed and what we may need to retain for legal or security reasons. Retention periods vary depending on the type of data and the purpose for which it is used (for example, account data versus conversation logs).

Security

We use industry-standard safeguards designed to protect information from unauthorized access, disclosure, alteration, or loss. No method of transmission or storage is 100% secure, but we work hard to keep your data safe.

• Access controls and authentication for admin accounts.
• Encryption in transit (HTTPS) where supported by the platform.
• Monitoring and rate limiting to help prevent abuse.

Your rights & choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information. To make a request, email support@chatbot.com.

• Access: request a copy of the personal information we hold about you.
• Correction: ask us to update inaccurate information.
• Deletion: request removal of information, subject to legal and security limits.
• Objection/restriction: request limits on certain processing in some circumstances.

Contact

If you have any questions about this Privacy Policy or how your data is handled, reach out anytime.