Privacy & data use

1. Our role in your automations

We act as a service provider that designs, builds and maintains automations on top of the digital tools you use in your business. In most cases, you remain the owner and primary controller of your data. We configure and operate workflows on your behalf, based on your instructions, to help you work more efficiently.

2. Where your data lives

The operational data used by your automations (for example calendar events, bookings, contact details, pipeline data or task information) is stored in cloud-based business platforms. Depending on the project, these platforms may be:

• systems that you manage directly under your own accounts and licenses; and/or
• systems that we manage on your behalf, where you are granted user access so you can consult and work with your data.

In both cases, the content processed through these tools belongs to you or your organization. Our role is to configure and operate the workflows that move and transform that information according to your instructions.

Our integration layer connects these systems and moves data between them as needed to execute the automations we have designed together. This layer acts only as a technical bridge: we do not repurpose your information for unrelated purposes or for other clients.

3. What we don't do with your data

In connection with our automation services:

• We do not sell, rent or trade your data.
• We do not use your data to build generic datasets that are shared with other clients.
• We do not intentionally use your data to train public AI models.

Any access we have to your systems is for the sole purpose of designing, implementing, monitoring and improving the automations you ask us to deliver.

4. What we may store on our side

We aim to minimize the amount of information we store directly. In general, we may keep:

• Basic contact and billing details so we can communicate with you and manage our commercial relationship.
• Technical configuration details required to keep your automations running (for example connection metadata, mapping rules or workflow settings).
• Limited logs or diagnostic information needed to monitor performance, detect errors and provide support.

We do not intentionally store full copies of your operational data (such as entire inboxes, full calendars or complete document libraries) unless this is explicitly required for a specific solution and agreed with you in advance.

5. Third-party services and changes over time

Many automations rely on third-party platforms, such as integration engines, communication tools, booking systems, dashboards, CRM solutions or cloud infrastructure. Each of these providers is responsible for its own security, privacy and compliance practices.

We aim to work with services that offer professional and enterprise-grade protections. However, the specific tools used in a given automation may evolve over time as technology, pricing and regulatory requirements change. When we change or add providers, we do so with the goal of maintaining or improving security, reliability and compliance.

6. Your responsibilities

You remain responsible for the data you choose to process through the systems we connect or operate for you, including any personal or sensitive information. This includes:

• Deciding which applications, data sources and datasets are connected to your automations.
• Managing, together with us where applicable, user access, permissions and retention policies in the platforms where your data is stored.
• Ensuring that your use of those platforms, and of the automations we build for you, complies with your internal policies and with applicable law in your jurisdiction.

If you intend to process highly sensitive information (for example health, financial or government-ID data), we strongly recommend obtaining appropriate legal and compliance approvals before enabling such automations.

7. Retainers and ongoing work

For clients on a recurring support or membership plan, we may periodically review and adjust existing workflows or implement new ones as your tools and processes evolve. Any additional access to data in that context follows the same principles described above: we use your information only to deliver, maintain and improve the automations you request.

8. Data this website collects

When you visit this site, talk to Chefsty, our AI agent, or write to us through the contact form, we process some personal data. Here is what happens in each case:

• Chat with Chefsty. The messages you write and the agent’s replies are processed with artificial intelligence tools to generate each response, and the conversation is stored in our database along with your browser’s technical identification (its type and version) and the page of this site where you use the chat. We also use AI to summarize each conversation, estimate how well our services fit what you need and, if you share your contact details, extract your name, email, company, phone number and what you need.
• Following up on your request. When the conversation includes enough details to contact you, we send the summary and the conversation to our internal request management tools and to our inbox, only so we can reply to you.
• Contact form. The name, email, company, phone number and message you submit reach us by email and in our internal request management tools. We do not keep a copy of the form in our database. If you open it from the chat, we pre-fill it with what you already told us in that conversation (you can edit it before sending) and attach the conversation summary so we can give you a better answer.
• Security and abuse prevention. We use Google reCAPTCHA to tell people apart from automated programs; Google may collect information about your device and browser under its own privacy policy. Your IP address is used to limit the number of requests: it is stored as a pseudonymized code (hash), not as readable text, and is deleted automatically, usually within a day.
• Storage in your browser. We store your language preference, an identifier for your chat conversation, a copy of its messages and a security code that proves the conversation is yours in your browser, so you can see it and pick it up again after reloading the page, and nobody else can read it from our server. This copy is deleted automatically 30 days after the last message, just like the conversation in our database. Google’s reCAPTCHA service may use its own cookies to perform its security function. We also store your choice about analytics cookies.
• Analytics and cookies. We count visits and the steps of the chat and the form anonymously (for example, how many people open the chat or submit the form). These are only daily totals by language, with no cookies, no identifiers and without storing your IP address. In addition, only if you accept it in the cookie notice, we use Microsoft Clarity to understand how the site is used through heatmaps and session recordings; Clarity uses cookies and Microsoft handles that data under its own privacy statement. What you type in the chat and the forms is hidden in those recordings. We do not use advertising cookies. You can change your choice at any time from “Cookie preferences” at the bottom of the page; we will ask again after one year.
• Retention. Chat conversations are deleted automatically 30 days after the last message. Details from requests we receive by email or in our management tools are kept for as long as needed to serve you and manage our business relationship.
• Service providers. To run the chat, our automations, the website hosting and email delivery, we use technology providers, including artificial intelligence and automation services, that process this data only on our behalf and to provide their service to us. Some may process it outside your country, including in the United States. We do not sell, rent or hand over your data to third parties for their own purposes, and we do not use it for advertising.

You can ask us to access, correct or delete the data from your conversations or messages by writing to automation@thechefsty.com. Please avoid sharing sensitive information in the chat, such as health or financial data or ID document details.

9. Changes to this notice

We may update this Privacy and Data Use notice from time to time to reflect changes in our services, technology or regulatory environment. When we do, we will update the “last updated” date at the top of this page and, where appropriate, highlight the most important changes. Your continued use of our services after an update will be taken as acceptance of the revised notice.

10. Contact

If you have questions about how we handle data in a specific project or on this website, or if you need us to adjust or remove a configuration or your data, write to automation@thechefsty.com or use the form on the Contact page.