Privacy Policy

Version: 2026-08-conversation-intelligence-v1 Last Updated: August 2, 2026

---

1. About This Policy

This Privacy Policy explains how Pirsum-Mi Ltd, operating as Chat4U ("Chat4U", "we", "us", or "our"), collects, uses, discloses, stores, and protects personal data when you visit our website, contact us, use Chat4U, or interact with a Chat4U-powered assistant.

Company details
Pirsum-Mi Ltd
Israeli company number: 514452028
4 Jasmin Street, Or Akiva, Haifa District, Israel
Website: https://chat4u.ai
Privacy contact: privacy@chat4u.ai

This Policy distinguishes between data we process as a controller and data we process as a processor for our customers. A customer deploying Chat4U is normally the controller of visitor conversations, lead submissions, knowledge-base content, and other data submitted to the Service. Chat4U processes that data on the customer's behalf under our Data Processing Addendum ("DPA").

If you interact with a Chat4U-powered assistant on a customer website, you should also read that website owner's privacy notice.

---

2. Our Roles

Chat4U generally acts as controller for account and workspace administration, billing, website and sales inquiries, support, security, service operations, legal records, privacy requests, and aggregated product analytics.

Chat4U generally acts as processor for visitor conversations, customer configuration and content, uploaded or scraped knowledge-base materials, retrieval data, customer-enabled lead capture, browser-tool data, and conversation-derived analytics. If a customer is itself a processor, Chat4U may act as its sub-processor.

---

3. Personal Data We Process

3.1 Accounts and Workspaces

We may process names, email addresses, user and organization identifiers, authentication and session information, workspace memberships, roles, permissions, invitations, account status, billing records, and related account information.

3.2 Projects, Assistants, and Knowledge Sources

We may process project and domain information, business context, prompts, assistant settings, model selections, guardrail settings, widget and demo configuration, URLs, uploaded files, extracted text, structured content, embeddings, retrieval context, citations, and related metadata.

Customers are responsible for having authority to submit, collect, scrape, store, transform, and use this content.

3.3 Visitor Conversations and Demos

When a visitor interacts with a Chat4U widget or demo, we may process messages, assistant responses, conversation and session identifiers, timestamps, feedback, source references, limited page context, device category, locale, and information needed for conversation continuity, security, and reliability.

Chat4U provides an in-widget AI and privacy disclosure. Customers remain responsible for any additional notices, lawful basis, consent, and rights handling required for their websites and use cases.

3.4 Lead Capture and Integrations

If enabled by a customer, we may process contact and form information selected by that customer and deliver it to a connected service such as a customer relationship management provider. The customer controls the fields, notice, legal basis, and destination.

3.5 Browser Tools

Optional browser-tool features may process page content, user interactions, tool requests and results, and approval information. Technical safeguards can reduce exposure but cannot guarantee that page content contains no personal or sensitive information.

3.6 Technical, Security, and Support Data

We may process network and request information, device and browser information, timestamps, logs, diagnostics, usage and rate-limit events, security signals, support communications, contact details, attachments, and legal or privacy request records.

3.7 Conversation Analytics and Inferences

Where enabled for a customer, Chat4U may analyze a conversation as a whole to provide customer support and business insights. These may include summaries, topics, language and sentiment, apparent resolution, possible knowledge gaps, engagement or commercial-interest indicators, and suggested follow-up or content improvements. Analytics may be generated for conversations already retained in accordance with the customer's settings and instructions.

These outputs are probabilistic inferences and may be incomplete or inaccurate. They are provided to authorized customer users for human review. Chat4U does not use them to make solely automated decisions that produce legal or similarly significant effects, and the feature is not intended to infer sensitive traits.

---

4. Cookies and Browser Storage

We use cookies, browser storage, and similar technologies for authentication, security, preferences, dashboard operation, consent choices, and conversation continuity. On our marketing website, the chat widget loads only after the applicable consent choice. Customers are responsible for disclosures and consent requirements on their own websites. See our Cookie Policy for details.

---

5. How We Use Personal Data

We use personal data to:

• provide, operate, secure, maintain, and support the Service;
• authenticate users and administer accounts, workspaces, subscriptions, and customer-requested integrations;
• provide AI chat, retrieval, indexing, demos, browser tools, and related functionality;
• provide customer-facing conversation analytics and improvement insights;
• respond to inquiries, support requests, complaints, and privacy requests;
• prevent and investigate abuse, fraud, security incidents, and misuse;
• enforce plan limits, contractual terms, and legal requirements; and
• maintain billing, compliance, security, and operational records.

We do not sell personal data or use customer-controlled personal data to train models across customers.

---

6. Legal Bases and Customer Instructions

Where Chat4U acts as controller and applicable law requires a legal basis, we may rely on performance of a contract, legitimate interests in operating and securing the Service, consent, or compliance with legal obligations, as appropriate to the processing.

Where Chat4U acts as processor, we process customer-controlled personal data on the customer's documented instructions under the DPA. The customer is responsible for its legal basis and instructions for visitor, lead, knowledge-source, and conversation-analytics processing.

---

7. Disclosure and Service Providers

We may disclose personal data to providers that help us host, authenticate, operate, secure, support, analyze, or bill for the Service. Depending on the features used, this may include cloud infrastructure, AI, identity, payment, email, observability, proxy, and customer-selected integration providers.

Amazon Web Services, including Amazon Bedrock, may process conversation content to provide AI-based conversation analytics. Not every provider processes data for every customer. Our current Sub-processor List provides more information.

We may also disclose information where required by law, to protect rights or security, or in connection with a corporate transaction.

---

8. International Transfers

We and our providers may process personal data in more than one country. Where required, we use contractual and legal safeguards appropriate to the processing relationship, including data processing terms and recognized transfer mechanisms.

For Amazon Bedrock conversation analytics, Chat4U uses geographic processing designed to keep inference within supported AWS Regions in the European Union. Requests may be processed in more than one Region within that geography. Other features and providers may involve different locations as described in their applicable terms and our Sub-processor List.

---

9. Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, customer instructions, security, legal obligations, dispute resolution, and enforcement of agreements.

Conversation analytics are retained with the related conversation and follow its deletion and retention path. Temporary copies used to produce analytics are normally removed after processing and are configured to expire within seven days. Provider-controlled security records, backups, and recovery copies may remain for limited periods under applicable provider terms and safeguards.

Conversation retention may be configurable by the customer. Other records, such as usage, support, billing, security, legal, and privacy-request records, may follow different periods based on their purpose. Deletion from active systems may not immediately remove all protected backup or recovery copies. See our Retention Schedule for more information.

---

10. Security

We use technical and organizational measures intended to protect personal data, including access controls, encryption and managed cloud safeguards where appropriate, monitoring, and operational controls. No service can guarantee absolute security. Customers are responsible for configuring their users, content, integrations, and visitor disclosures appropriately.

---

11. Privacy Rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent.

If you are a visitor to a customer website, that customer is normally the controller of your conversation and should usually be contacted first. Chat4U assists customers with verified requests as required by the DPA and applicable law. See our Privacy Rights notice or contact privacy@chat4u.ai.

Where applicable, you may complain to a competent data-protection authority.

---

12. Sensitive Data and High-Risk Uses

The Service is not intended for submission of sensitive or regulated personal data unless expressly covered by appropriate safeguards and a separate written agreement. High-Risk Use is governed by the Acceptable Use Policy and is prohibited unless a separately signed Enterprise agreement authorizes the exact use.

---

13. Changes to This Policy

We may update this Policy to reflect changes in our practices, products, providers, or legal obligations. The version and last-updated date identify the current publication.

---

14. Contact

Pirsum-Mi Ltd (Chat4U)
4 Jasmin Street, Or Akiva, Haifa District, Israel
https://chat4u.ai
Privacy: privacy@chat4u.ai
Support: support@chat4u.ai