PerfectCSR, Inc. ("PerfectCSR", "we", "our", or "us") wrote this policy to keep the handling of your personal information out in the open. It covers our website, platform, APIs, and every related service (together, the "Services"). By using the Services, you agree to the collection and use of information as described here.
Information We Collect
Information reaches us in three ways: what you hand us directly, what our systems record automatically while you use the Services, and what arrives from third-party sources.
a. Information you provide
- Account data: what you share at registration, including your name, email address, password, company name, and role.
- Billing data:payment method details handled securely by our payment providers (Stripe). Raw card numbers never touch our servers.
- Communications: anything you send us through support tickets, email, or live chat.
- Training content: the documents, URLs, text, and media you upload to train your AI agents.
b. Information collected automatically
- Usage data: the pages you visit, features you use, clicks, session duration, and referring URLs.
- Device data: IP address, browser type, operating system, screen resolution, and device identifiers.
- Log data: server logs covering request timestamps, error reports, and performance data.
- Cookies & tracking: first-party cookies and similar technologies, explained fully in Section 5.
c. Information from third parties
- Signing in with Google shares your name, email address, and profile picture with us through Google's OAuth service.
- When you connect integration partners such as Salesforce or HubSpot, they may pass us the contact and CRM data you have explicitly authorized.
d. Facebook Messenger
A business using PerfectCSR can connect its Facebook Page so that its AI agent answers Messenger conversations. When it does:
- What we receive: the messages people send to that Page, plus the sender's Page-scoped ID and name.
- Why: only to generate and send the business's replies, and to show the conversation to that business's support agents in their PerfectCSR dashboard.
- What we don't do: we do not sell this data, and we do not use it for advertising.
- How long we keep it: Messenger conversations follow the same rules as other conversation logs (Section 4): 12 months by default, or sooner if the business deletes them or closes its account.
- Deleting your data: if you messaged a business's Page and want your Messenger data deleted, email privacy@perfectcsr.ai with the Page name and your name as shown on Facebook. We delete it within 30 days.
e. Instagram
A business using PerfectCSR can connect its Instagram professional account so that its AI agent answers Instagram direct messages. When it does:
- What we receive: the direct messages people send to that account, including any photos, videos or voice messages they attach, plus the sender's Instagram-scoped ID.
- Why: only to generate and send the business's replies, and to show the conversation to that business's support agents in their PerfectCSR dashboard.
- What we don't do: we do not read posts, comments or followers, we do not sell this data, and we do not use it for advertising.
- How long we keep it: Instagram conversations follow the same rules as other conversation logs (Section 4): 12 months by default, or sooner if the business deletes them or closes its account.
- Deleting your data: if you messaged a business on Instagram and want your data deleted, email privacy@perfectcsr.ai with the business's Instagram username and your own. We delete it within 30 days.
f. Gmail
A business using PerfectCSR can connect its Gmail mailbox so that its AI agent answers the emails it chooses. When it does:
- What we access: only the emails under the Gmail label the business selects, and later replies in those same threads: their sender, subject, text and attachments. We do not read the rest of the mailbox.
- Why: only to generate and send the business's replies in the same email thread, or save them as drafts, and to show the conversation to that business's support agents in their PerfectCSR dashboard.
- What we don't do: we do not sell this data, we do not use it for advertising, and we do not use it to train generalized AI models. No person at PerfectCSR reads these emails unless the business asks us for support, or it is required for security or by law.
- How long we keep it: Gmail conversations follow the same rules as other conversation logs (Section 4): 12 months by default, or sooner if the business deletes them or closes its account. Disconnecting Gmail removes our access to the mailbox at Google immediately.
- Deleting your data: if you emailed a business that uses PerfectCSR and want your data deleted, email privacy@perfectcsr.ai with the business's email address and your own. We delete it within 30 days.
PerfectCSR's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How We Use Your Data
Every piece of information we collect earns its keep through one of these purposes:
- Providing, maintaining, and improving our Services and AI agent platform.
- Processing transactions and sending the related billing information and receipts.
- Sending transactional emails such as account confirmations, password resets, and service alerts.
- Sharing product updates and marketing communications, which you can opt out of at any time.
- Responding to your comments, questions, and support requests.
- Monitoring and analyzing usage patterns to improve product experience and security.
- Detecting, preventing, and addressing fraud, abuse, or violations of our Terms of Service.
- Complying with our legal obligations and enforcing our agreements.
We do not sell your personal data.Not to advertisers, not to data brokers, not to anyone. Your information is never traded, sold, or rented to third parties for their own marketing purposes.
Data Sharing
Your information leaves our hands only in these limited circumstances:
The trusted vendors who help us run the platform, covering cloud hosting, analytics, email delivery, and payment processing. Each one is contractually bound to protect your data and barred from using it for their own purposes.
If PerfectCSR goes through a merger, acquisition, or asset sale, your data may transfer as part of that deal. We will notify you before your data is transferred or becomes subject to a different privacy policy.
We may disclose information when law, regulation, or a court order requires it, or when we believe in good faith that disclosure is necessary to protect rights, property, or safety.
We share information with third parties whenever you give us explicit permission to do so, for example when you enable a third-party integration.
Data Retention
We keep personal data only as long as it takes to deliver the Services and fulfil the purposes in this policy, unless the law demands a longer period.
- Account data stays for the lifetime of your account, plus 90 days after deletion to allow for recovery.
- Training data you upload is deleted within 30 days of account termination or as soon as you explicitly request it.
- Billing records are held for 7 years, as financial regulations require.
- Conversation logs, including Facebook Messenger and Instagram conversations, are kept for 12 months by default; enterprise customers can set custom retention windows.
- Aggregated analytics data may be kept indefinitely in de-identified form.
Cookies & Tracking
Cookies and similar technologies keep the Services running and help us improve them. Your browser settings give you control over cookie preferences.
| Type | Purpose | Duration |
|---|---|---|
| Essential | Signing you in, keeping your session alive, and protecting your account | Session |
| Functional | Remembering your preferences, language, and dashboard layout | 1 year |
| Analytics | Understanding product usage, feature engagement, and performance | 2 years |
| Marketing | Retargeting and conversion tracking (opt-in only) | 90 days |
Security
We protect your data with industry-standard measures against unauthorized access, alteration, disclosure, or destruction.
No method of transmission over the internet is 100% secure. We work hard to protect your data, but we cannot promise absolute security. If you discover a security issue, contact security@perfectcsr.ai immediately.
Your Rights
Depending on where you live, you may hold the following rights over your personal data:
To exercise any of these rights, email privacy@perfectcsr.ai. You will hear back within 30 days. We may need to verify your identity before acting on your request
GDPR & CCPA
GDPR (EU/EEA residents)
If you are in the European Union or European Economic Area, PerfectCSR processes your data under the following legal bases: performance of a contract, legitimate interests, legal obligation, and consent where applicable. Privacy questions can be sent to privacy@perfectcsr.ai, and you always retain the right to lodge a complaint with your local supervisory authority.
CCPA (California residents)
Under the California Consumer Privacy Act, California residents have the right to know, delete, and opt out of the sale of personal information. We do not sell personal information. To submit a verifiable consumer request, email privacy@perfectcsr.ai.
Children's Privacy
PerfectCSR is not built for children under the age of 16, and we do not knowingly collect their personal information. If you believe a child's data has reached us by mistake, contact us immediately at privacy@perfectcsr.ai and we will delete it promptly.
Changes to This Policy
This policy will evolve alongside our Services. Whenever we make material changes, we will:
- Post the updated policy on this page with a revised "Last updated" date.
- Send an email notification to the address associated with your account.
- Obtain your consent before the changes take effect, where the law requires it.
Continuing to use the Services after changes take effect means you accept the updated policy.
Contact Us
Questions, concerns, or requests related to this Privacy Policy? Here is how to reach us:
M Floor, The Meydan Hotel,
Nad AL Sheba, Dubai, U.A.E