Privacy Policy
1. Who we are
TelliDesk Chat ("TelliDesk", "we", "us") is an AI chat service for business websites and messaging apps, operated by Websiteflix, Inc., 401 E Las Olas Blvd, Suite 130 PMB 676, Fort Lauderdale, FL 33301. This policy explains what personal information we handle when you use chat.tellidesk.com, the TelliDesk dashboard, the chat widget and related services (the "Service"), and the choices you have.
2. Two kinds of data, two roles
Our customers' account data. When a business signs up, we collect information about that business and its team members, such as names, emails, billing details and settings. For this data, we decide how it is used and we are the controller.
Conversation data. When someone chats with a business through the TelliDesk widget, Chat page, WhatsApp, Messenger or Instagram, we process that conversation on behalf of the business. The business decides why and how this data is used; we act as its processor (or "service provider"). If you chatted with a business that uses TelliDesk and want to see, change or delete what you shared, please contact that business first. We will help them respond.
3. What we collect
From customers and their team members
- Account details: name, email address, password (stored only as a secure hash), business name, role, and settings such as operating hours and notification preferences.
- Billing details: billing name, email, address and plan. Card numbers are entered directly into our payment processor, Stripe; we never see or store full card numbers.
- Content you add: knowledge sources (files, web pages, text), saved replies (macros), logos and chat settings.
- Security data: sign-in records, two-factor authentication settings and IP addresses used to protect accounts against misuse.
- Device alerts: if you turn on push alerts, a device push address from your browser so we can deliver notifications.
From people who chat with our customers ("visitors")
- Messages sent in the chat, and replies from the business's AI assistant and staff.
- Contact details the visitor chooses to give, such as a name or email address, or the phone number or profile ID provided by WhatsApp, Messenger or Instagram when the visitor writes to a business there.
- Technical information: IP address, approximate country derived from the IP address, browser and device type, the page being viewed, the referring page, and a random visitor ID stored in the browser so that a returning visitor can continue a conversation.
- Live typing: if the business turns this feature on, staff can see a message while the visitor is typing it, before it is sent. These drafts are shown in real time only and are not stored.
4. How we use information
- To provide the Service: show and route conversations, generate AI answers, send messages and notifications, and run the features each business turns on.
- To manage accounts, subscriptions, invoices and customer support.
- To keep the Service secure: prevent spam and abuse, enforce visitor bans set by businesses, and detect suspicious sign-ins.
- To send service emails, such as invitations, password resets, plan-limit warnings and, where the business has turned it on, emails telling a visitor that the business replied. Every visitor email includes a link to stop further emails about that conversation.
- To understand usage in aggregate (for example, how many AI replies were sent) so we can operate and improve the Service.
We do not sell personal information, use conversation data to advertise, or use one customer's conversations to answer another customer's visitors.
5. AI processing
To answer a visitor, TelliDesk sends the visitor's question, recent conversation history and relevant excerpts from the business's knowledge sources to our AI provider, OpenAI, through its business API. Under OpenAI's API terms, this data is not used to train OpenAI's models by default. AI answers can be incomplete or wrong; businesses can review conversations and hand any chat to a person.
6. Who we share information with
We share personal information only with service providers that help us run TelliDesk, under contracts that require them to protect it and use it only for that purpose:
| Provider | What they do |
|---|---|
| OpenAI | Generates AI answers and search indexes for knowledge sources |
| Stripe | Payments, subscriptions and invoices |
| Mailgun | Delivers service emails |
| Meta (WhatsApp, Messenger, Instagram) | Delivers messages when a business connects these channels |
| Browser push services (Google, Apple, Mozilla, Microsoft) | Deliver push alerts to devices that turned them on |
| Our hosting provider | Servers and databases in the United States |
Businesses can also connect their own tools, such as Google Analytics, Slack, HubSpot, Mailchimp, Zapier, Make or webhooks. When they do, TelliDesk sends the related data to that tool on the business's instructions, and the tool's own privacy policy applies. Country lookups use a database stored on our own servers (from DB-IP), so no visitor data is sent to a third party for that.
We may also disclose information if required by law, to protect the rights and safety of our users or the public, or as part of a merger or sale of our business, in which case this policy continues to apply.
Reseller partners. If a business works with a TelliDesk reseller partner (for example, the agency that built its website), the business can let that partner open its dashboard to help. The business chooses the level: Setup only, which covers settings and keeps conversations and contacts private, or Full support, which also lets the partner read and answer conversations and see contacts. Partners never see billing details or passwords. The business can change or remove this access at any time, and sees a log of each time its partner opened the dashboard.
7. WhatsApp, Messenger and Instagram
When a business connects a WhatsApp number, Facebook Page or Instagram account to TelliDesk, we receive the messages people send to that account, along with the profile name and the ID or phone number Meta provides. We use this data only to show those conversations to the business in TelliDesk, to let its AI assistant and staff reply, and to keep a record of the conversation for the business. We do not use Meta platform data for advertising, do not sell it, and do not share it with anyone except as described in this policy. Access tokens for these accounts are stored encrypted. A business can disconnect a channel at any time under Workspace → Channels, and can delete conversations or its whole account as described below.
8. Cookies and local storage
- Dashboard: one essential cookie keeps team members signed in. Your browser also saves preferences such as alert sounds.
- Chat widget: the widget stores a random visitor ID, the current conversation ID and a sound on/off setting in the visitor's browser storage, so the conversation continues across pages and visits. It does not set advertising cookies.
- If a business connects Google Analytics or Google Tag Manager, those tools may set their own cookies on the business's website, under the business's own cookie notice.
9. How long we keep data
- Conversations and contacts are kept for as long as the business keeps its TelliDesk account, unless the business deletes them sooner.
- Account data is kept while the account is open. When an account is deleted, we delete its data, including conversations, knowledge sources and uploaded files, within 30 days. Routine backups are overwritten within a further 30 days.
- Billing records are kept as long as tax and accounting laws require, usually 7 years.
- Server and security logs, which can include IP addresses, are deleted on a rolling basis within 12 months.
10. Security
All traffic uses HTTPS encryption. Passwords are stored as one-way hashes, and connected-app tokens and two-factor secrets are encrypted. Access to production systems is limited to authorized staff. Team members can protect their accounts with two-factor authentication. No system is perfectly secure, but we work to protect your information and will notify affected customers of a data breach as required by law.
11. Your rights and choices
Depending on where you live, including the European Economic Area, the United Kingdom and US states such as California, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain uses, and to withdraw consent. We do not sell or "share" personal information for cross-context behavioral advertising, and we will not treat you differently for exercising your rights.
- Customers and team members can update most information in the dashboard (Account, Billing) or contact us.
- Visitors should contact the business they chatted with. If you contact us instead, we will forward your request to that business and help it respond.
If you are in the EEA or UK, you may also complain to your local data protection authority. When personal information is transferred to the United States, we rely on appropriate safeguards such as Standard Contractual Clauses.
12. Deleting your data
Businesses: the account owner can delete individual conversations from the inbox, remove knowledge sources, disconnect channels, and ask us to delete the whole account by emailing [email protected] from the owner's email address. We confirm and complete account deletion within 30 days.
People who messaged a business through WhatsApp, Messenger, Instagram or the chat widget: to delete your conversation data, contact the business you messaged, or email [email protected] with the subject "Data deletion request". Include the business name and the phone number, profile name or email you used. We will verify the request, coordinate with the business, and confirm by email once your data is deleted, normally within 30 days. You can also remove TelliDesk's access to your Facebook data at any time under Facebook Settings → Apps and websites.
13. Children
The Service is meant for businesses and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, please contact us and we will delete it.
14. Changes to this policy
We may update this policy as the Service changes. We will post the new version here with a new effective date and, for significant changes, notify account owners by email or in the dashboard before the changes take effect.
15. Contact us
Websiteflix, Inc.
401 E Las Olas Blvd, Suite 130 PMB 676, Fort Lauderdale, FL 33301
Phone: +1 (855) 225-4535
Privacy questions and requests: [email protected]
General support: [email protected]