1. Overview & Commitment
PageClerk ("we", "our", or "us"), operated under Reshapify, is committed to safeguarding the privacy and security of your personal data and the organizational documentation you entrust to our platform. This Privacy Policy explains what information we collect, how it is processed to deliver AI assistant responses, and your rights regarding your data.
2. Information We Collect
We collect information in the following categories:
- Account Credentials: Name, email address, company name, and passwords, which are stored only as salted one-way hashes (scrypt) and never in readable form.
- Customer Knowledge Base Sources: Content extracted from URLs, XML sitemaps, uploaded PDF, DOCX, TXT, or Markdown files, and custom Q&A pairs.
- Vector Embeddings: 768-dimensional mathematical vector representations generated from your source text to perform semantic retrieval.
- Conversation Transcripts: Messages, queries, assistant replies, latency statistics, and cited source tags recorded during chat interactions.
- Visitor Lead Inquiries: Contact information (name, email address, phone number) submitted voluntarily by visitors through the embedded chat widget.
- Billing Information: Payment card numbers and transaction details processed securely via Stripe. We do not store raw card numbers on our servers.
3. AI Data Processing & Model Training
We do NOT use your confidential documents, uploaded files, or private customer conversation transcripts to train or fine-tune public foundational AI models.
Your content is utilized solely to perform Retrieval-Augmented Generation (RAG) on behalf of your account:
- Your source text is chunked and embedded using Google Gemini (primary) or OpenAI (fallback) embedding models.
- When a visitor asks a question, we execute a localized vector similarity search across only the documents associated with your specific chatbot.
- The retrieved relevant snippets are passed as contextual references in the API call to generate an accurate, grounded answer citing your sources.
4. Third-Party Service Providers
We work with trusted infrastructure providers to deliver our service:
- Convex: Cloud database, serverless backend, real-time WebSocket communication, and vector indexing.
- Google Cloud (Gemini API): Primary conversational reasoning and vector embedding generation.
- OpenAI: Fallback conversational reasoning and vector embeddings.
- Stripe: Payment processing, customer billing management, and tax calculation.
- Resend: Transactional password reset and email verification delivery.
5. Data Retention & Deletion
You maintain complete ownership of your data at all times. When you delete a chatbot or delete individual sources from your dashboard, the source documents, their vector embeddings, and associated conversation history are permanently purged from the database. You may also request full account closure and data deletion by contacting support.
6. Security Measures
PageClerk implements strict security controls including TLS 1.3 transport encryption for all web requests, AES-256 database encryption at rest, secure HTTP-only cookies for session authentication, and isolated tenant queries preventing any cross-account data leakage.
7. Your Rights (GDPR & CCPA)
Depending on your jurisdiction, you possess the rights to:
- Access and receive a copy of your stored personal information.
- Export your conversation transcripts and lead data in CSV or JSON format.
- Rectify inaccurate personal details via your account settings.
- Request the complete erasure of your account and all associated data.
8. Contact Us
If you have any questions, inquiries, or requests regarding this Privacy Policy or your data, please contact our privacy team at: support@pageclerk.com