Privacy Policy

This Privacy Policy explains how Ysnip ("we", "us", "our") collects, uses, and safeguards personal data when you use our website, dashboard, and the embeddable chat widget (together, the "Service"). We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

1. Who we are

Ysnip is the data controller for personal data processed about our account holders and website visitors. For any privacy questions, contact us at info@ysnip.com.

2. Data we collect

Account data

• Name, email address, and password (stored securely and hashed).
• Business details you provide (company name, website, branding, persona settings).
• Billing information processed by our payment provider, Stripe.

Widget & lead data

• Chat messages exchanged between website visitors and the AI assistant.
• Contact details visitors voluntarily submit through the lead form (e.g. name, email, phone, message).
• Technical data such as the page URL where a conversation took place.

Usage data

• Aggregated analytics such as conversation and lead counts used to power your dashboard.
• Local storage on the visitor's browser to remember an ongoing conversation.

3. How we use data

• To provide, operate, and improve the Service.
• To generate AI responses (chat content is sent to our AI provider, Google, solely to produce replies).
• To deliver lead notifications and confirmation emails.
• To process payments and manage subscriptions.
• To secure the Service and prevent abuse.

4. Legal bases for processing

We process personal data on the basis of contract performance (providing the Service), legitimate interests (securing and improving the Service), consent (where required, e.g. optional communications), and legal obligations (e.g. accounting).

5. Sharing & sub-processors

We do not sell personal data. We share data only with trusted sub-processors that help us run the Service:

• Google Firebase — hosting, database, and authentication.
• Google Gemini — AI response generation.
• Stripe — payment processing.
• Our email provider — sending transactional emails.

6. International transfers

Some sub-processors may process data outside your country. Where data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. Data retention

We retain account and lead data for as long as your account is active. When you delete your account, associated data is removed or anonymised within a reasonable period, except where we must retain it to comply with legal obligations.

8. Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. To exercise these rights, contact info@ysnip.com. You may also lodge a complaint with your local data protection authority.

9. Security

We use industry-standard measures including encryption in transit, access controls, and secure infrastructure to protect personal data. No method of transmission or storage is completely secure, but we work continuously to protect your information.

10. Cookies & local storage

The chat widget uses browser local storage to remember an ongoing conversation. This is essential to the widget's functionality and is not used for advertising.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

13. Contact

Questions about this policy? Email us at info@ysnip.com.

This document is provided as a general template and does not constitute legal advice. Please have it reviewed by a qualified professional before relying on it.