Privacy Policy

This policy explains what A Smarter Bot ("we", operated by Twine Interactive, Inc.) collects, why, and what you can do about it. It applies to the dashboard at asmarter.bot and to the chat widget and API that our customers embed on their own websites.

Two kinds of people use this service

• Customers create an account, configure assistants, and pay for a plan. You are the controller of the data your assistants collect.
• Visitors chat with an assistant on a customer's website. We process visitor data on the customer's behalf.

What we collect from customers

• Account details: your name, work email, company name, and password (stored hashed).
• Assistant configuration: site descriptions, questions and answers, actions, guardrails, and appearance settings you enter.
• Billing: handled by Stripe. We store your Stripe customer id, the last four digits and brand of your payment method, and your plan. We never see full card numbers.
• Usage: message counts and model token counts per month, used for plan limits, overage, and our own cost accounting.
• Team: the email addresses you invite and the roles you assign.

What we collect from visitors

• The messages a visitor types and the assistant's replies, stored as a conversation history that the customer can review.
• A random visitor id kept in the visitor's browser so a conversation can resume after a page reload.
• If the customer's site identifies the visitor as signed in, the user id, name, and email the site chooses to pass us.
• The page the widget was loaded on, the browser's user-agent string, and a one-way hash of the IP address used for rate limiting. We do not store the IP address itself.

How the assistant produces answers

Visitor messages, the conversation so far, and the customer's configured knowledge are sent to Anthropic's Claude API to generate replies. Anthropic processes this data under its commercial terms and does not use it to train models. We never send payment details or passwords to the model, and platform rules instruct it not to request them.

Retention

• Starter plan: conversations are kept for 30 days, then deleted automatically.
• Growth plan: conversations are kept for 90 days, then deleted automatically.
• Scale plan: conversations are kept for 365 days, then deleted automatically.
• Account and configuration data is kept while the account exists. Owners can export everything as a ZIP or delete the account from Account settings; deletion is immediate and permanent.
• Monthly usage totals are kept for billing records after conversations are deleted.
• Server logs are kept for 30 days.

Who else touches the data

• Amazon Web Services (United States): hosting, database, email delivery, and content delivery.
• Anthropic (United States): the language model that generates replies.
• Stripe (United States): payments, invoices, and the billing portal.

We do not sell personal data and do not use advertising trackers. The dashboard uses a session cookie and a CSRF cookie needed to keep you signed in; the widget uses browser storage only for the visitor id and conversation reference described above.

Security

Data is encrypted in transit and at rest. Each customer's data is isolated by account at the application layer, and access to production systems is limited to the people who operate the service. If we learn of a breach affecting your data we will notify you without undue delay.

Your rights

Customers can access, correct, export, and delete their data from the dashboard. Visitors should contact the website they were chatting with, since that customer controls the conversation data; we will assist customers with such requests. You can also write to us at hello@asmarter.bot.

Changes

If we change this policy in a way that matters, we will email account owners before it takes effect. The effective date above tells you which version you are reading.