Privacy Notice
How Pluxbot collects, uses, and protects personal data when you interact with a chatbot powered by our service.
Last updated: 11 June 2026
1. About this notice
Pluxbot is a software service that helps small businesses run AI-powered chatbots on their websites. This notice explains what happens to your personal data when you chat with one of those chatbots. It applies to visitors of any website that has embedded the Pluxbot widget.
Two parties are usually involved: the business whose website you are visiting (the "data controller" — they decide why and how your data is used), and Pluxbot (the "data processor" — we run the technology on their behalf). For questions about a specific chat, the website operator is the primary contact. For questions about how Pluxbot itself handles data, contact us.
2. What we collect
When you use a Pluxbot widget, the following may be collected and stored:
- Name and email — only if you choose to provide them in the optional pre-chat form. You can skip this.
- Chat messages — the questions you type and the AI's responses, so the business can review past conversations.
- Language preference — stored locally in your browser so the widget remembers your choice between visits.
- Technical metadata — timestamps, an anonymous session identifier, and approximate request origin (used only for rate-limiting and abuse prevention).
We do not collect IP addresses for tracking, we do not use cookies for advertising, and we do not build user profiles.
3. Why we process this data
- To answer your question by sending it to an AI language model and returning the response.
- To let the business that operates the chatbot review past conversations and follow up if you chose to share your contact details.
- To prevent abuse and spam (rate-limiting).
- To keep the service running and to debug technical errors.
The lawful basis for processing under the GDPR is legitimate interest (providing a chat service you actively initiated) and, where you submit contact details, your consent.
4. Who we share data with
Pluxbot relies on a small number of trusted sub-processors to deliver the service:
- Groq (United States) — processes your message text through a large language model to generate the chatbot's reply. Messages are not retained by Groq for training.
- Supabase (hosted in the EU/US) — stores conversation history, leads, and configuration data on encrypted Postgres infrastructure.
- Vercel (United States, EU edge) — hosts the website and serverless API endpoints.
- Resend (United States) — sends transactional emails (e.g. password resets, support replies). Only used if you contact us.
- Stripe (United States/Ireland) — processes payments. Only relevant if you become a paying Pluxbot customer; not used for end-visitor chats.
International data transfers outside the European Economic Area rely on the Standard Contractual Clauses approved by the European Commission.
5. How long we keep data
- Chat conversations: retained while the business operating the chatbot remains an active Pluxbot customer, or until they delete the conversations from their dashboard.
- Leads (name and email): retained until the business deletes them or closes their Pluxbot account.
- Technical and rate-limit data: kept for up to 30 days, then automatically purged.
- If a business cancels their Pluxbot account, all associated data is permanently deleted within 30 days.
6. Your rights
Under the GDPR and similar laws, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion ("right to be forgotten").
- Object to processing or restrict it.
- Receive your data in a portable format.
- Withdraw consent at any time (where processing is based on consent).
- Lodge a complaint with your local data protection authority. In Denmark, this is Datatilsynet.
To exercise any of these rights, contact the business operating the chatbot first (they are the data controller). You can also contact Pluxbot directly at support@pluxbot.com and we will route the request appropriately.
7. Cookies and local storage
The Pluxbot widget does not set tracking cookies. It uses your browser's localStorage to remember small, non-sensitive preferences such as your selected language and whether you have already entered your name. You can clear this at any time via your browser settings, and no data is sent to Pluxbot until you start a chat.
8. Children
Pluxbot is not directed at children under 16. If you believe a child has shared personal data with a Pluxbot-powered chatbot, please contact support@pluxbot.com and we will delete it promptly.
9. Security
Data is transmitted over HTTPS. Storage is encrypted at rest. Access to production data is restricted and logged. We use Row-Level Security policies in our database to ensure businesses can only access their own data.
10. Changes to this notice
We may update this notice from time to time. Material changes will be reflected in the "Last updated" date at the top. We recommend reviewing it occasionally.
11. Contact
Pluxbot is operated from Denmark. For any privacy-related question:
Email: support@pluxbot.com
Website: pluxbot.com