Privacy Policy

Last updated: 15 July 2026

TalkWidget ("we", "us") provides an AI chat widget and AI-visibility service for websites, operated from Australia. This policy explains what personal information we collect, how we use it, and the choices you have. It covers both our customers (businesses with a TalkWidget account) and visitors who interact with the TalkWidget chat widget on our customers' websites.

Information we collect from customers

• Account details — name, email address, and a hashed password when you create an account.
• Configuration data — your business name, FAQ content, business profile (description, contact details, address, social links), and website domains you authorise.
• Billing data — subscription plan and payment status. Card details are processed and stored by Stripe, our payment provider; we never see or store full card numbers.
• Usage data — query counts and widget activity used for plan limits and product analytics.

Information we process from website visitors

When a visitor uses the TalkWidget chat widget on a customer's website, we process on that customer's behalf:

• Chat messages — the text the visitor types, sent to our servers to generate a reply using an AI model.
• Contact details — name, email address and (optionally) phone number, only when the visitor chooses to submit them through the lead form.
• Technical data — browser language (to reply in the visitor's language) and the referring domain (to verify the widget is authorised on that site).

The widget does not set tracking cookies and does not collect data until the visitor interacts with it. Visitor conversations and leads are made available to the customer whose website hosts the widget.

How we use information

• To provide the service — answering visitor questions, capturing leads, and publishing business information the customer configures (schema.org structured data and llms.txt).
• To operate accounts, billing, security (including optional two-factor authentication) and support.
• To send transactional email such as verification, password reset, billing and service notifications.
• We do not sell personal information, and we do not use visitor conversations to train AI models.

Service providers

We use a small number of infrastructure providers to run TalkWidget: Vercel (hosting), Supabase (database), Anthropic (AI responses), Stripe (payments) and Resend (transactional email). Each receives only the data necessary to perform its function.

Data retention and deletion

Account data is retained while your account is active. Deleting your account permanently removes your agents, FAQ content, leads and conversation history. Customers can also delete individual agents (and their data) at any time from the dashboard. Visitors can request deletion of their conversation or lead data via the website owner they interacted with, or by contacting us.

Security

Data is encrypted in transit, passwords are stored hashed, accounts support two-factor authentication, and widget access is restricted to domains each customer authorises.

Your rights

Subject to the Australian Privacy Act and any other applicable law (such as the GDPR where it applies), you may request access to, correction of, or deletion of your personal information by contacting us.

Contact

Questions or requests: hello@talkwidget.io