Legal

Privacy Policy

Effective date: August 5, 2026

This Privacy Policy explains how Infi Web Solutions ("Infi Web Solutions", "we", "us", or "our") collects, uses, and discloses information in connection with InfiBot, our AI chatbot platform, and all related websites, dashboards, APIs, and embeddable widgets (collectively, the "Service"). This Policy applies both to Customers who create and manage a Bot through the Service, and to end visitors who chat with a Bot deployed by a Customer.

Please also review our Terms of Service, which governs use of the Service alongside this Policy.

1. Information We Collect

a. Account & billing information

When you create an account, we collect your name, username, email address, company name, and password (stored in hashed form, never in plain text). If you subscribe to a paid plan, our payment processors (e.g. Stripe, Razorpay) collect and process your billing details directly — we do not store full payment card numbers ourselves.

b. Content you provide to configure a Bot

To build and operate your Bot, the Service processes content you submit, including: website URLs you ask us to crawl and the pages discovered from them; PDF documents you upload; system prompts and instructions you write; and appearance/branding settings. This content is stored and indexed (including in a vector database) so your Bot can answer questions based on it.

c. Conversation data

When a visitor chats with a Bot, we process and store the messages exchanged, along with any information the visitor voluntarily provides during the conversation (such as their name, email, or phone number, if your Bot is configured to collect it as a lead). If a conversation is handed over to a human agent, that agent (your team member) can view the conversation history to respond.

d. Integration data

If you connect third-party integrations, we process what's necessary to operate them on your behalf: WhatsApp Business Account tokens and phone number identifiers (to send/receive WhatsApp messages through your Bot), and Google Sheets access tokens and spreadsheet/column mappings (to write leads or conversation data to a spreadsheet you choose).

e. Usage & technical data

We automatically collect certain technical information when you or your Bot's visitors use the Service, such as IP address, browser type, device information, pages visited, timestamps, and general usage/event logs (e.g. when a handover is triggered, or a workflow step completes), used for operating, securing, and improving the Service.

f. Cookies & similar technologies

We use cookies and similar technologies (such as local storage) on our dashboard and embedded widget to keep you signed in, remember a visitor's chat session, and understand how the Service is used. You can control cookies through your browser settings, though disabling them may affect parts of the Service.

2. How We Use Information

We use the information described above to:

  • Provide, operate, and maintain the Service, including generating AI-powered Bot responses;
  • Create and manage your account and process billing for paid plans;
  • Enable features you configure, such as lead capture, human handover, and third-party integrations;
  • Communicate with you about your account, updates, and support requests;
  • Monitor, secure, and improve the Service, including diagnosing technical issues;
  • Comply with legal obligations and enforce our Terms of Service.

3. AI Providers & Third-Party Processing

Generating a Bot's responses requires sending relevant conversation content and knowledge-source excerpts to the AI provider you (the Customer) select for that Bot — currently OpenAI, Anthropic, Google (Gemini), or DeepSeek. Each provider processes this data under its own terms and privacy practices to generate a response, which the Service then returns to the visitor. We do not control how these third-party AI providers process data beyond what's needed to fulfill the request; we encourage you to review the privacy policies of the provider(s) you choose.

We also use infrastructure and processing providers to operate the Service, such as cloud hosting, database, and email-delivery providers, and (where connected) WhatsApp/Meta and Google, each acting under their own applicable terms.

4. How We Share Information

We do not sell your personal information. We share information only:

  • With the AI providers and integration partners described in Section 3, as necessary to operate features you've enabled;
  • With service providers who process data on our behalf (e.g. hosting, storage, email delivery, payment processing), under confidentiality obligations;
  • Within your own organization — an account owner and any team members they invite can access conversations, leads, and settings for that tenant;
  • If required by law, legal process, or to protect the rights, property, or safety of Infi Web Solutions, our users, or the public;
  • In connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

5. Data Retention

We retain account information, Bot configuration, knowledge sources, and conversation data for as long as your account is active, or as needed to provide the Service. If you delete a knowledge source, Bot, or your account, we take reasonable steps to delete the associated data within a reasonable period, except where we are required to retain it for legal, tax, or security purposes.

6. Your Choices & Rights

You can access, update, or delete much of your account and Bot configuration data directly from the dashboard. Depending on your location, you may have additional rights under applicable data protection law, such as the right to request access to, correction of, or deletion of your personal information, or to object to certain processing. To exercise these rights, contact us using the details in Section 9. If you are a visitor who chatted with a Bot and want to make a request about your conversation data, please contact the business operating that Bot directly, as they control what happens with their Bot's data as the Customer.

7. Data Security

We use reasonable technical and organizational measures designed to protect information from unauthorized access, loss, misuse, or alteration, including encrypted password storage and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

Infi Web Solutions is based in India, and information we collect may be processed and stored in India or other countries where we or our service providers operate. Where required, we take steps intended to ensure such transfers comply with applicable data protection law.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us at hr@infiwebsolutions.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice, such as by posting the updated Policy on this page with a new effective date. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.