Privacy

What we do with data

Written to be read rather than to be defensible. If anything here is unclear, ask us and we will explain it and then fix the wording.

Last updated 22 September 2026.

The short version

• We collect what is needed to run your chatbot, and nothing for advertising.
• We never sell or rent anything to anybody.
• We never email your website's visitors.
• Card details never reach our servers.
• Ask us to delete something and we will.

Two different groups of people

This page covers both, and they are not the same:

• Customers — businesses with a GlobeSign account.
• Visitors — people who talk to a chatbot on a customer's website.

For visitor conversations, the customer whose website it is decides what happens to that information. We hold and process it on their behalf. If you spoke to a chatbot on a business's website and want your details removed, you can ask that business, or ask us and we will act on it.

If you are a customer

What we hold

• Your name, email address and password (stored only as a one-way hash — we cannot read it and neither can anyone who takes a copy of the database).
• Your business name, website address and the settings for your chatbot.
• Your knowledge base: whatever we read from your website plus whatever you have written.
• Your billing status and a reference to your payment method held by Stripe. Not your card number — we never have it.
• Ordinary server logs, which include IP addresses, kept for security and debugging.

Reading your website

When you sign up we fetch a small number of pages from the website address you gave us — the sort of thing any search engine does — and use them to build your knowledge base. We respect your robots.txt and we only read pages that are already public.

If you are a visitor talking to a chatbot

What is recorded

• The messages in the conversation.
• The name, email and phone number you type in, if you choose to give them.
• The page you were on when you started, roughly where you are, and whether you were on a phone or a computer.
• The time and how long it lasted.

Where it goes

To the business whose website you were on. They receive the conversation by email and it appears in their dashboard. That is the entire point of the product, and it is what the business is paying for.

We do not email you. Not a copy of the transcript, not a follow-up, not a newsletter. You talked to that business, not to us.

Who else sees it

A few companies do specific jobs for us. That is the whole list:

• Anthropic — provides the AI that writes the replies. The conversation and the relevant knowledge base are sent so it can answer.
• Stripe — handles payments. They hold the card; we hold a reference.
• SMTP2GO — delivers our email, so transcripts and receipts pass through them.
• Our hosting provider — runs the servers the platform sits on.

Nobody else. We do not sell data, we do not rent it, we do not share it with advertisers, and there is no analytics or advertising tracking on this website or inside the chat widget.

Cookies

This website sets one cookie, and only when you sign in or open the contact form: the session cookie that keeps you logged in and stops the form being abused by bots. There is no analytics cookie, no advertising cookie and no third-party tracker, which is why there is no cookie banner nagging you.

The chat widget keeps your conversation in your own browser's storage so it is still there if you reload the page. Clearing your browser data clears it.

How long we keep things

Conversations, leads and knowledge bases are kept for as long as the account is open, because a business needs to be able to look back at who contacted them. We do not currently delete them automatically on a schedule.

Ask us to delete something — one conversation, one person's details, or everything — and we will do it. If you close your account and want the data gone, say so and we will remove it rather than leaving it sitting there.

Security

• Everything is served over HTTPS.
• Passwords are stored as one-way hashes.
• API keys in the database are encrypted.
• Card numbers are never on our servers at any point.
• Access to the platform's admin tools is limited to the people who run it.

No one can honestly promise a system cannot be broken into. What we can say is that the things that would hurt most in a breach — passwords and card numbers — are not sitting there in a readable form.

Your rights

You can ask us what we hold about you, ask for a copy, ask us to correct it, and ask us to delete it. Send us a message and we will deal with it ourselves — there is no form and no ticket system to fight.

If you are in Canada and you are not satisfied with how we have handled a privacy question, you can raise it with the Office of the Privacy Commissioner of Canada.

Children

This is a product sold to businesses and it is not intended for children. We do not knowingly collect information from anyone under 13, and if we find that we have we will delete it.

Changes

If we change this page we will update the date at the top. If a change actually matters — a new company seeing your data, a new kind of information collected — we will email customers rather than quietly editing the page and hoping.

Getting in touch

GlobeSign

Or use the contact form, which reaches the same people.