Privacy Policy
Last updated: November 21, 2025
Introduction
Widget-Chat ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use Widget-Chat, our drop-in AI chat widget for Flutter, FlutterFlow, React, and the web.
Information we collect
Account information
When you create a Widget-Chat account, we may collect information you voluntarily provide, including:
- Name and email address
- Company name and project configuration
- Payment information (processed securely through third-party providers)
- Communication preferences
End-user chat data
For visitors who chat through a Widget-Chat widget embedded in an operator's app, we process:
- Chat conversations and any photos a visitor chooses to attach
- A pseudonymized user identifier — user IDs are hashed by default, and can be HMAC-signed by the operator
- Basic technical metadata such as request origin, used to enforce allowed-origins and prevent abuse
We identify visitors by a pseudonymous ID, not their name, unless the operator's app shares its own login with the chat.
How we use information
- Providing, operating, and improving the Widget-Chat service
- Generating an assistant response — messages are sent to our AI provider (Google Gemini), which does not train its models on data sent through the API
- Maintaining conversation history so the chat keeps context
- Processing payments and managing subscriptions
- Sending service updates and, with consent, marketing communications
- Producing the conversation analytics, API/tool-call logs, and moderation reports operators see in the dashboard
- Ensuring security and preventing fraud and abuse
Some operators may enable a notice that chats can be used to improve their own service. When that applies, the notice is shown to the visitor inside the chat.
AI disclosure
Widget-Chat assistants are AI systems, not humans. We surface a clear in-chat AI-disclosure notice so visitors always know they are talking to an AI. See our overview of how Widget-Chat works for more detail.
Data sharing and disclosure
We do not sell personal information. We may share data with:
- Service providers that assist in operations (hosting, analytics, payment processing, and our AI provider)
- The operator whose app embeds the widget, for conversations that occur in their project
- Law enforcement when required by legal obligations
Data security
We implement industry-standard security measures, including encryption in transit, hashed user IDs by default, optional HMAC-signed identities, require-verification, and allowed-origins restrictions. No method of transmission over the internet is 100% secure.
Your rights
Wherever you are (GDPR in the EU, CCPA in California, and similar laws elsewhere), you can:
- Access your personal data
- Request correction of inaccurate information
- Request deletion of your data
- Export your chat data in a portable format
- Clear your conversation history
- Opt out of marketing communications
Widget-Chat provides per-user data export and clear so operators can honor these requests. To exercise a right, contact the operator of the app you used, or contact us directly.
Data retention
We retain information for as long as necessary to provide the service, comply with legal obligations, and resolve disputes. Conversation history is retained to provide context unless you or the operator request that it be cleared or deleted.
Children's privacy
The service is not intended for users under 13 years of age. We do not knowingly collect information from children under 13.
International data transfers
Information may be transferred and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers.
Changes to this policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the service.
Contact us
If you have questions about this Privacy Policy, contact us at:
Email: privacy@widget-chat.com
