Privacy Policy

GrimmChat, Address available on request, Switzerland. Contact: [email protected].

If you build a chatbot (account holder): when you sign in with Google, we receive your identifier and email address. We store your chatbot configurations, your credit balance and debit history, and the content you index (pages crawled from your website or documents you upload), so Grimm can answer from it.

If you browse or chat with Grimm on a website (visitor): the widget does not require an account and sets no tracking cookies. Messages you type are stored with a random session identifier so the conversation keeps its context. When you send a contact request, an inquiry or an order through Grimm, the details you provide — such as your name, email, message and any selected items — are collected and forwarded to the site owner so they can reply or fulfil it; the site owner is then a separate controller of that data. Any in-widget payment is simulated and collects no card details; real payment, where it applies, happens on the site owner’s own checkout. Avoid entering sensitive personal data you would not want shared with the site owner. The conversation shown in your browser is kept locally on your device and clears when you close the tab or after 30 minutes of inactivity.

This data is used to provide the Service (let visitors browse your content, answer their questions, and pass the contact requests, inquiries and orders they submit to the site owner), manage accounts, bill actions in credits and provide support. We do not sell your data and we do not use your content or conversations to train models.

We rely on the following providers to run the Service: Google (sign-in), Supabase (database, authentication and session management), OpenAI (language model and embeddings — messages and indexed content are sent to OpenAI to generate answers), Firecrawl (crawling of the pages an account holder chooses to index), GrinGhost (the payment layer that meters and bills credit usage), Stripe (card processing when you top up your balance — card data never touches our servers), and Railway (hosting).

Indexed content and chatbot configurations are kept as long as the chatbot exists and are deleted with it. Conversation messages are kept with their anonymous session identifier to provide conversation history. Contact requests, inquiries and orders submitted by visitors are kept with the chatbot and shared with the site owner, who is a separate controller of them, and are deleted with the chatbot. Account and billing data (credit balance, spending caps, debit history) are kept for as long as your account exists.

In accordance with the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP), you have the right to access, correct, delete and port your data, and to object to or restrict its processing. To exercise these rights, email [email protected]. You may also lodge a complaint with your local data protection authority.