Privacy Policy

Last Updated: January 14, 2026

At PerfectCSR.AI Inc., we value your privacy and are committed to safeguarding your personal information. We believe in complete transparency about the data we collect and how we use it.

Throughout this document, when we refer to "we", "us", or "our", we mean PerfectCSR.AI Inc. and its affiliates. When we refer to "you" or "your", we mean you as a user, visitor, or customer interacting with our services.

This Privacy Policy applies to all interactions you may have with PerfectCSR.AI and is intended to help you understand our practices concerning the collection, use, and disclosure of information. We retain the right to amend or update this Privacy Policy at any time—the updated version will be indicated by a new "Last Updated" date.

Please note: By engaging in any form of communication with PerfectCSR.AI, you acknowledge you have read and understood this Privacy Policy. Should you disagree with our policy, we kindly ask you not to interact with any aspect of our business.

1. Your Global Privacy Rights

No matter where you live, where you reside, where your citizenship lies, or where your data originates from, your interactions with PerfectCSR.AI are governed by this Privacy Policy and you agree to the data practices described in this policy.

2. Data We Handle

2.1 Scope of Engagements

Information collection and processing occur through various interactions, including but not limited to:

• Clients using our Services via different platforms, including our Website, API, Partner Program, or any other products and services we offer
• Visitors navigating our Website or otherwise communicating with us through various channels including social media, email, chat widgets, or signing up for our marketing communications
• Participants attending events we host or sponsor

All these interactions are referred to as "Engagements" within this policy, irrespective of the depth or nature of your association with us.

2.2 Roles in Data Handling

Depending on your Engagements with us, we act either as:

• Data Processor (Service Provider): When you process Client Data that you supply or control through our AI chatbot Services
• Data Controller: For Personal Data and attribution information we collect or you share with us outside the service agreement (e.g., Website interactions, events, feedback submitted directly to us)

2.3 Types of Data We Collect

Our Engagements may collect and process your information including Personal Data depending on how you interact with us:

• Identifiers: Full name, email address, phone number, IP address, username, password, and technical identifiers
• Commercial Information: Transactional data, payment information, subscription details, and support tickets
• Electronic Activity: Website interactions, chat logs, pages visited, links clicked, and performance metrics
• Device & Geolocation: IP address, operating system, device type, browser details, and geographic region
• AI Training Data: Content you upload for chatbot training, including documents, FAQs, and knowledge base materials
• Chat Content: Conversations between your AI chatbot and your end-users, processed to deliver and improve our Services

2.4 Sensitive Data Caution

When using our Engagements, avoid sharing (or having us process) any sensitive data such as genetic data, biometric data, or health data as defined by applicable data protection laws. You acknowledge that we bear no liability for such data you provide to us.

3. How We Process Your Information

3.1 Processing Purposes

We process your information for the following purposes:

• Service Delivery: To provide, maintain, operate, and improve our AI chatbot Services, including facilitating effective service delivery, monitoring performance, and developing new features
• AI Training & Improvement: To train and improve our AI models using anonymized and aggregated data to enhance chatbot accuracy and conversational abilities
• Safety & Security: To ensure security, prevent fraud, detect malicious activities, and maintain system reliability
• Compliance: Meeting legal obligations including billing, law enforcement requests, and regulatory requirements
• Personalization: Tailoring your experience and recognizing you when you return to our Services
• Communication: Keeping you informed about offers, updates, and important service-related notices
• Analytics: Aggregating and anonymizing data for research, benchmarking, and understanding usage patterns

3.2 Your Responsibilities as a Client

As a Client using our AI chatbot Services, you are responsible for:

• Processing Personal Data in accordance with relevant data privacy laws
• Obtaining necessary consents from your end-users before collecting their data through our Services
• Ensuring the accuracy, quality, and legality of data you upload for AI training
• Providing appropriate privacy notices to your end-users about how their data is processed

3.3 Managing Your Personal Data

You have the right to manage your Personal Data. Contact us at privacy@perfectcsr.ai for any data access, modification, copy, or deletion requests. Our standard response time is 30 days, which may be extended in complex cases.

3.4 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, remember your preferences, and gather analytics about how you use our Services. You can learn more in our Cookie Policy. Please note that limiting cookies may affect some features of our Services.

3.5 Children's Personal Data

We do not knowingly collect Personal Data from anyone under the age of 16. If you notice we have collected data from anyone under 16 unintentionally, please contact us at privacy@perfectcsr.ai immediately.

4. How We Share Information

We respect your privacy and are committed to safeguarding your data. We do not sell, rent, or trade your Personal Data to unrelated third parties. We may share information in the following circumstances:

4.1 Affiliates

We may share your data with our parent, subsidiary, or affiliated companies. If our company merges or its assets are transferred, the involved entities will handle your Personal Data according to this Privacy Policy.

4.2 Service Providers

We share necessary data with trusted service providers who assist in operating our Services (e.g., hosting, payment processing, security, analytics). They are bound by confidentiality obligations and appropriate safeguards.

4.3 Third-Party Integrations

Our Services may integrate with third-party tools and platforms (e.g., Shopify, WordPress, WhatsApp, Messenger). These services operate under their own privacy policies, and you are responsible for reviewing them.

4.4 Legal Requirements

We may disclose data to comply with legal requests, protect rights and safety, or investigate fraud without prior notification in certain cases.

5. Data Security

We use appropriate technical and organizational measures to protect your Personal Data:

• End-to-end encryption for all data in transit and at rest
• SOC 2 Type II compliance
• Regular security audits and penetration testing
• Enterprise-grade access controls and authentication
• Audit-ready logs and monitoring
• Employee security training and background checks

While we implement safeguards designed to protect your information, we cannot guarantee absolute security from intrusion. If a security breach affects your data, we will notify you as required by law.

6. Data Retention

We retain your data only as long as necessary for the purposes collected:

• Account Data: Retained while your account is active plus 30 days after deletion request
• Chat Logs: Retained according to your subscription plan settings (you control retention periods)
• Billing Data: Retained for 7 years for tax and legal compliance
• Analytics Data: Anonymized and aggregated data may be retained indefinitely for service improvement

7. International Data Transfers

PerfectCSR.AI operates globally, and your data may be processed outside your country. We use appropriate safeguards including:

• EU Commission-approved Standard Contractual Clauses (SCCs)
• UK International Data Transfer Addendum
• Data Privacy Framework certification

We ensure that data transfers comply with GDPR and other applicable regulations.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your Personal Data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Request transfer of your data in a machine-readable format
• Objection: Object to certain processing activities
• Restriction: Request limitation of processing
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

9. Jurisdiction-Specific Rights

GDPR (European Union)

We comply with the General Data Protection Regulation (GDPR). EU residents have enhanced rights as described in Section 8.

UK GDPR

We comply with the UK Data Protection Act 2018 and UK GDPR for United Kingdom residents.

CCPA/CPRA (California)

California residents have rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know, delete, correct, and opt-out of sharing. We do not sell Personal Information for monetary consideration. To exercise your rights, contact privacy@perfectcsr.ai.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

PerfectCSR.AI Inc.
Email: privacy@perfectcsr.ai
Data Protection Officer: dpo@perfectcsr.ai

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last Updated" date and, where appropriate, through additional notice methods.