Privacy Policy

The controller is WeBoost, a sole proprietorship registered under number 321475519, operated by Ouriel Bensoussan and publisher of the ScanChat AI service ("we").

For any question about your personal data or to exercise your rights, you can write to us at info@scan-chat.ai.

This policy applies to the personal data we process as controller: that of our customers and their users (account, billing, use of the service, communications with us), as well as that of prospects and visitors to the scan-chat.com website and the dashboard.scan-chat.ai customer area.

It does not apply to the data of visitors to our customers' websites processed by the chatbots (conversations and leads). For that data, our customer is the controller and we act as processor, in accordance with the Data Processing Agreement (DPA) available at scan-chat.com/dpa (see section 11).

• Account data: name, email address and password. The password is handled by our authentication provider and stored in hashed form: we never have access to it in clear text. If you sign in with Google or GitHub, we receive your basic profile information, including your name and email address.
• Billing data: billing country, company name, company number (registration or VAT number), address, city and postal code, as well as the plan purchased, payment history and invoices. Your card details are entered directly with our payment provider or PayPal: we neither receive nor store them.
• Content of your account: your chatbots and their settings, the knowledge you provide to them (content of website pages, documents), your corrections and, where applicable, your own artificial intelligence API keys, which are encrypted.
• Usage data: number of replies used, chatbots created, activity statistics, as well as technical data (IP address, browser type, login dates and times) processed for the security of the service.
• Communications with us: the emails you send us and the information entered in the contact form (name, email address, subject and message).
• Emails sent: we keep a record of the emails we send you (type of email and date sent), in particular to avoid duplicates.

We process your data for the following purposes:

• creating and managing your account, providing the service and supporting you: performance of the contract;
• managing subscriptions, payments and billing: performance of the contract and compliance with our legal obligations, in particular accounting and tax obligations;
• sending you service-related emails (account, free trial, payments, new lead alerts, warning before data deletion): performance of the contract;
• sending you a monthly activity report and reminders: legitimate interest in informing you about your chatbots' activity and supporting you. You can turn these emails off at any time in Settings > Notifications or using the unsubscribe link they contain;
• ensuring the security of the service and preventing fraud and abuse, in particular by limiting the free trial to once per email address: legitimate interest;
• responding to requests sent through the contact form or by email: legitimate interest or pre-contractual measures taken at your request;
• improving the service using usage statistics: legitimate interest;
• complying with our legal obligations and establishing, exercising or defending our rights: legal obligation and legitimate interest.

We do not sell your personal data.

• Account data: for as long as your account exists. You can delete your account at any time from the settings of your customer area, or by writing to info@scan-chat.ai. An account with no active subscription and no sign-in for 3 years may be deleted, after a warning email sent at least 30 days beforehand.
• Content of your account (chatbots, knowledge, conversations, leads): during your subscription, then 90 days after it ends; it is then deleted automatically, after a warning email sent 7 days before deletion.
• Billing data (invoices and payments): for the period required by accounting and tax obligations.
• Communications with us: for the time needed to handle your request and follow up on our relationship.
• Answers to the optional survey offered when you cancel your subscription or delete your account: kept with the account email address for 12 months; the email address is then erased and only the anonymous answers are kept.
• Backups: overwritten within 14 days.

Your data is accessible only to authorised persons within our business, to the extent necessary for their tasks.

It is also processed on our behalf by the following providers:

• Hostinger: hosting of the application server (France, EU);
• Supabase: database and authentication (France, Paris region, EU);
• Cloudflare: network security and proxy (global network);
• Google (Gemini API): generation of answers and processing of the chatbots' knowledge (United States and global infrastructure);
• Brevo: email delivery (France, EU);
• Firecrawl: reading the public pages of websites indicated by our customers (United States);
• Cloudinary: storage of chatbot logos and images (United States);
• our invoicing (issuing of invoices) and card payment providers (Israel).

The following services also receive some of your data and act as separate controllers, under their own privacy policies:

• PayPal, when you pay through PayPal;
• Google and GitHub, when you sign in with these services.

We may also disclose data to authorities where required by law.

We are established in Israel, a country covered by an adequacy decision of the European Commission (Decision 2011/61/EU, maintained following its review of 15 January 2024). Our invoicing and card payment providers are also established there.

Some of our providers are located outside the European Union. These transfers rely on an adequacy decision, on the recipient's certification under the EU-U.S. Data Privacy Framework or on the standard contractual clauses adopted by the European Commission. You can obtain information about these safeguards by writing to us at info@scan-chat.ai.

Our website and customer area use no advertising cookies and no audience measurement tools, and include no third-party trackers.

We only use your browser's local storage for items that are strictly necessary or that you have chosen:

• the authentication tokens that keep you signed in to the customer area;
• your language and display theme preferences;
• temporary information used to complete a payment in progress.

These items do not require your consent. Fonts and icons are served from our own servers.

If we add advertising or audience measurement tools in the future, a banner will let you accept or refuse their use, and this policy will be updated.

We implement appropriate technical and organisational measures to protect your data, including: encryption of exchanges (HTTPS/TLS), network protection by Cloudflare, isolation of each customer's data in the database, encryption of the API keys you entrust to us, two-factor authentication for administration, rate limiting, daily backups that are regularly tested, and access to systems limited to the owner of the business. These measures are detailed in Annex 2 of the Data Processing Agreement (DPA).

Under applicable law, in particular the GDPR, you have the following rights over your data:

• right of access and rectification;
• right to erasure;
• right to restriction of processing;
• right to data portability;
• right to object, in particular to processing based on our legitimate interest;
• right to withdraw your consent at any time, where processing is based on it.

To exercise these rights, write to us at info@scan-chat.ai. We may ask you to prove your identity. We respond within one month, which may be extended in the cases provided for by law.

You may also lodge a complaint with a supervisory authority, for example the CNIL in France or the data protection authority of your country of residence or work.

If you have interacted with a ScanChat AI chatbot on a business's website, that business decides how your data (conversations and any contact details provided) is used: it is the controller, and we process the data on its behalf.

The widget tells you that you are chatting with an assistant based on artificial intelligence.

For each chatbot, the widget stores in your browser:

• in local storage: a random session identifier (scanchat_session_…), created when you use the chat, and the date of your last exchange (scanchat_last_activity_…), which allow the conversation to continue;
• in session storage, cleared when the tab is closed: display flags (scanchat_teaser_done_…, scanchat_rating_done_…, scanchat_chatted_…, scanchat_proactive_…), which avoid showing the welcome message, a proactive message or the rating request again.

These items are strictly necessary for the chat you use and do not require your consent. Your IP address is not recorded with your conversations.

To exercise your rights over this data, contact the business concerned, referring to its privacy policy. If you contact us, we will forward your request to that business and help it respond.

The service is intended for professionals. It is not directed at persons under 16 and we do not knowingly collect their data.

We may update this policy. The date of the last update appears at the top of this page. In case of a material change, our customers are informed by email.

For any question about this policy or your personal data, write to us at info@scan-chat.ai.