Privacy Policy

This Privacy Policy explains what Simplifying AI ('we', 'us', 'our') collects, how we use it, and who else sees it when you use ChatPlotDB, Relay and our websites (together, the 'Services'). It is the document section 5.2 of our Terms of Service points to.

The Services are for business use. Where we handle data you connect or upload, or the conversations of your website's visitors, we handle it on your instructions and to run the Services for you, and you remain responsible for that data being lawful.

Information you give us

• Account and contact details, such as your name, email, company, and role.
• Billing details, when you buy a plan or a credit pack. Card details are handled by our payment provider, not stored by us; we keep a record of your plans, purchases and credit balances.
• Messages you send us, such as support requests, sales enquiries, and waitlist submissions.

Information we collect automatically

• Usage and device data, such as pages viewed, features used, IP address, browser type, and timestamps.
• Error and diagnostic data when something in the product fails.
• Cookies and similar technologies, as described below.

Your data

'Your data' means anything you connect, upload, or create using the Services: database connections, uploaded CSV and Excel files, the questions you ask, the queries the agent writes, the results it returns, and your dashboards and configs. For Relay it also means the public pages of the website you give it, the documents you upload to it, and your visitors' conversations. Connection credentials are encrypted before they are stored and are never returned to the browser.

Your website's visitors (Relay)

Visitors chat without signing in. We keep what they type, Relay's answers, the page they started on, and an anonymous visitor identifier, plus anything a visitor chooses to give, such as an email address so your team can reply. To keep bots out, the widget may run a browser check. If you connect a WhatsApp number to Relay, people who message it are your visitors too: we keep their WhatsApp phone number and profile name with the conversation, and Meta carries their messages and Relay's replies. For this data you, our customer, decide what Relay is used for, and we process it on your behalf; your own privacy notice should tell your visitors about it (Terms 5.5).

• To run the Services: answering your questions, storing your threads, dashboards, and configs, and answering your visitors through Relay.
• To support you, and to reply when you write to us.
• To keep the Service working and secure, including diagnosing errors and preventing abuse.
• To bill you, and to enforce usage, credit, plan and billing limits, including emailing you when a credit balance runs low.
• To tell you about changes to the Services or these policies.
• To meet our legal obligations.

We do not sell your personal information, and we do not use your data to advertise to you.

ChatPlotDB turns your question into a query, runs it read-only, and then sends the result back to an AI model so the model can describe and chart it. That means the rows a query returns are seen by the model provider serving that turn. Relay sends your website's pages, the documents you upload, and your visitors' messages to its models to read the site and answer. If the provider serving a request fails at that moment, the request may be retried on another provider from the list below so the answer still arrives. Choose your models with that in mind, and consider an enterprise deployment if the models need to run inside your own cloud.

We do not build models of our own, and we do not train any model on your data. We select model providers whose API terms do not permit training on the data we send them.

AI output can be wrong. Section 11 of the Terms covers what that means for you and your visitors; this policy only covers what happens to the data.

A sub-processor is an outside company that processes data on our behalf. These are the ones we use today. Which model providers are involved depends on the models you and your organization's admins pick, and on the backup provider a request falls back to if the first one fails.

• OpenAI (United States): GPT models, our default for ChatPlotDB chat and for Relay's reading of your website's pages; a backup for building configs and custom tools and for Relay's answer-quality check; and when you select one.
• Z.ai (Singapore): GLM models, our default for guests, the Help panel, Relay's reading of images and PDFs, and Relay's answer-quality check; the first backup for ChatPlotDB chat, Relay's reading of your website and Relay's answers; and the backup when a request to another provider fails.
• DeepSeek (China): DeepSeek models, our default for Relay's answers to visitors, the first backup when a GLM request fails, and when you select one.
• Anthropic (United States): Claude models, our default for building configs and custom tools, and when you select one.
• Moonshot AI (China): Kimi models, only for conversations that were started on a Kimi model.
• Google (United States): text and image embeddings, so Relay can search your website by meaning.
• Amazon Web Services (United States and the region you choose): hosting, databases, storage for uploaded files and Relay documents, and sending email. On an enterprise deployment, models are served through Amazon Bedrock inside your own AWS account.
• Dodo Payments: payment processing, as the merchant of record for your plans and packs.
• Cloudflare: the browser check that keeps bots out of sign-up and the Relay widget.
• Tavily: web search, only when a question uses the web search tool.
• Sentry: application error and performance monitoring.
• Slack: only if you connect the Slack integration, so questions and answers can be posted in your workspace.
• Meta (WhatsApp): only if you connect a WhatsApp number to Relay. Your visitors' messages and Relay's replies pass through Meta's WhatsApp Business Platform, under your own Meta account and Meta's terms.

We update this list when it changes. If you want notice of changes before they take effect, write to support@simplifyingai.com.

• With professional advisors and auditors, and with authorities where the law requires it.
• With a buyer or successor, if our business is merged, acquired, or sold.
• With anyone you deliberately share with: a shared thread or shared dashboard link is unauthenticated, so anyone holding the URL can read it. Connection details are stripped from those, and you can revoke a link at any time.

We do not share your data with anyone else for their own purposes.

We are based in Bangalore, India, and our sub-processors operate in the United States and elsewhere, so your data may be processed outside the country you are in. Where the law requires a transfer safeguard, we rely on the appropriate mechanism, such as the European Commission's Standard Contractual Clauses.

If the GDPR applies to you, we process personal data to perform our contract with you, for our legitimate interests in running and securing the Service, with your consent where consent is required, and to comply with legal obligations.

• A deleted account or organization is kept for 3 months so it can be restored, then it and all its data are permanently deleted (Terms, section 9). Billing and credit records are kept as the law requires.
• Relay conversations are kept for a period set by your Relay plan, counted from the visitor's last message: 90 days on Starter or with no plan, 1 year on Premium, no time limit on Enterprise.
• Help panel conversations are kept for 30 days.
• For Relay on WhatsApp, the record of each incoming message is kept for 8 days (its text is removed once answered) and the record of each message Relay sent for 35 days, to stop duplicates and track delivery; the conversation itself follows your Relay plan.
• Uploaded files carry a time limit, so abandoned uploads do not sit around indefinitely.
• We will run a sweep to remove stored artefacts for your account on request.
• Account, billing and credit records are kept as long as the law requires.

We do not promise your data will be kept or backed up. See section 10.2 of the Terms.

Connection credentials are encrypted at rest and never returned to the browser, queries run read-only, and records are scoped to your account and organization. Our Security page sets out what we do and, just as importantly, what we do not promise yet. No method of transmission or storage is completely secure.

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or restrict processing, and to withdraw consent. If you are in the EEA or UK these are your GDPR rights; if you are a California resident, the CCPA and CPRA give you rights to know, delete, correct, and opt out of sale or sharing. We do not sell personal information.

To delete your account, or to exercise any other right, write to support@simplifyingai.com from the email address on your account, and we will respond within the time the applicable law allows. A deleted account is kept for 3 months in case you change your mind, then permanently deleted.

We use cookies to keep you signed in, remember your preferences, and understand how the product is used. You can control cookies through your browser settings, though signing in will not work without the ones that carry your session.

On this website we use Google Analytics and PostHog to see which pages people find useful. Neither is used for advertising, and neither is sent what you type into a form. “Your Privacy Choices” in the footer turns both off in your browser.

The Service is for business use and is not directed to children under 16. We do not knowingly collect personal information from them.

We may update this policy. We will post the updated version with a new date at the top and, if a change is important, try to tell you before it takes effect.

For any privacy question, or to ask what we hold about you, email support@simplifyingai.com.