Legal

Privacy Notice

How Pluxbot collects, uses, and protects personal data when you interact with a chatbot powered by our service.

Last updated: 22 July 2026

1. About this notice

Pluxbot is a software service that helps small businesses run AI-powered chatbots on their websites. This notice explains what happens to your personal data when you chat with one of those chatbots. It applies to visitors of any website that has embedded the Pluxbot widget.

Two parties are usually involved: the business whose website you are visiting (the "data controller" — they decide why and how your data is used), and Pluxbot (the "data processor" — we run the technology on their behalf). For questions about a specific chat, the website operator is the primary contact. For questions about how Pluxbot itself handles data, contact us.

2. What we collect

When you use a Pluxbot widget, the following may be collected and stored:

Name and email — only if you choose to provide them in the optional pre-chat form. You can skip this.
Chat messages — the questions you type and the AI's responses, so the business can review past conversations.
Language preference — stored locally in your browser so the widget remembers your choice between visits.
Technical metadata — timestamps, an anonymous session identifier, and your IP address. Your IP address is used only transiently to enforce rate limits and prevent abuse; it is not used to track you, build a profile, or serve advertising.

We do not use cookies for advertising, and we do not build advertising or behavioural profiles about you.

3. Why we process this data

To answer your question by sending it to an AI language model and returning the response.
To let the business that operates the chatbot review past conversations and follow up if you chose to share your contact details.
To prevent abuse and spam (rate-limiting).
To keep the service running and to debug technical errors.

The lawful basis for processing under the GDPR is legitimate interest (providing a chat service you actively initiated, and keeping it secure) and, where you submit contact details, your consent.

4. Who we share data with

Pluxbot relies on a small number of trusted sub-processors to deliver the service:

Groq (United States) — processes your message text through a large language model to generate the chatbot's reply. Messages are not retained by Groq for training.
Supabase (hosted in the EU/US) — stores conversation history, leads, and configuration data on encrypted Postgres infrastructure.
Vercel (United States, EU edge) — hosts the website and serverless API endpoints.
Resend (United States) — sends transactional emails (e.g. access keys, trial and billing notices, support replies). Only used if you are a Pluxbot customer or contact us.
Stripe (United States/Ireland) — processes payments. Only relevant if you become a paying Pluxbot customer; not used for end-visitor chats.

International data transfers outside the European Economic Area rely on the Standard Contractual Clauses approved by the European Commission.

5. How long we keep data

Chat conversations: retained while the business operating the chatbot remains an active Pluxbot customer, or until they delete the conversations from their dashboard.
Leads (name and email): retained until the business deletes them or closes their Pluxbot account.
Technical and rate-limit data (including transient IP data): kept only as long as needed for security and abuse prevention, and in any case no longer than 30 days, then automatically purged.
If a business cancels their Pluxbot account, all associated data is permanently deleted within 30 days. This matches the retention period in our Terms of Service.

6. Your rights

Under the GDPR and similar laws, you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion ("right to be forgotten").
Object to processing or restrict it.
Receive your data in a portable format.
Withdraw consent at any time (where processing is based on consent).
Lodge a complaint with your local data protection authority. In Denmark, this is Datatilsynet.

To exercise any of these rights, contact the business operating the chatbot first (they are the data controller). You can also contact Pluxbot directly at support@pluxbot.com and we will route the request appropriately.

7. Marketing emails

If you are a Pluxbot customer, we send you service emails that are necessary to run your account (access keys, trial and billing notices, security alerts, support replies) — these are not marketing. We may also occasionally send optional product news or offers, which you can opt out of at any time via the unsubscribe link or by emailing support@pluxbot.com, without affecting your service emails.

8. Cookies and local storage

The Pluxbot widget does not set tracking cookies. It uses your browser's localStorage to remember small, non-sensitive preferences such as your selected language and whether you have already entered your name. You can clear this at any time via your browser settings, and no data is sent to Pluxbot until you start a chat.

9. Children

Pluxbot is not directed at children under 16. If you believe a child has shared personal data with a Pluxbot-powered chatbot, please contact support@pluxbot.com and we will delete it promptly.

10. Security

Data is transmitted over HTTPS. Storage is encrypted at rest. Access to production data is restricted and logged. We use Row-Level Security policies in our database to ensure businesses can only access their own data.

11. Changes to this notice

We may update this notice from time to time. Material changes will be reflected in the "Last updated" date at the top. We recommend reviewing it occasionally.

12. Contact

Pluxbot is operated from Denmark. For any privacy-related question:

Email: support@pluxbot.com
Website: pluxbot.com