Text for your own privacy notice

In short

If your website runs AI Chat for Website, your own privacy notice should say so. Below are two paragraphs you can paste into it, one for each setting of the Record visits to my website switch in the portal's Settings, and a note for your cookie banner, including the Ask visitors for consent setting.

Replace the words in square brackets. This wording describes what our software does. It is not legal advice, and whether you need consent depends on where your visitors are.

This summary is here to help you read the document. The numbered sections below are the document.

1. If visit recording is on (the default)

Paste this into your privacy notice:

Chat and visit information. Our website has a chat provided by AI Chat for Website, a service of DevSmooth Software Inc. (Canada), which acts as our service provider and processes this information only on our behalf. When you visit our website, the chat software records the pages you view (without the part of the address after a question mark), the page that referred you, campaign tags in the link you followed, your IP address and the country it indicates, your browser, device type, operating system, language, time zone and screen size, how long you stay, how far down a page you scroll and where on it you click (positions only: not what you type, and no recording of your screen or mouse movement). To recognise your browser on a later visit it keeps a random identifier in your browser's local storage. It sets no cookies, and the identifier is not shared with any other website. If you use the chat, we also store what you write, the answers you receive and any name, email address or phone number you give us, so that we can answer you and follow up. Answers may be written by an AI assistant that works from the content of this website; it runs on the provider's own servers, and your conversation is not sent to a third-party AI company. Please do not put sensitive information in the chat. Visit records are deleted after 6 months and conversations 12 months after their last message. If your browser sends the Global Privacy Control signal, your visits are not recorded. To see, correct or delete your information, contact us at [your contact address].

If you ask for consent (Ask visitors for consent in Settings), add after the first sentence: The chat records your visit only if you agree. Until then, and if you decline, it records nothing about your visit and stores nothing in your browser except your answer, and the chat still works. You can change your answer at any time from "Privacy choices" in the chat [or: in our cookie settings].

2. If visit recording is off (chat-only mode)

Paste this into your privacy notice:

Chat. Our website has a chat provided by AI Chat for Website, a service of DevSmooth Software Inc. (Canada), which acts as our service provider and processes this information only on our behalf. The chat does not record your visit, and it stores nothing in your browser, unless you use it. If you start a chat, we store what you write, the answers you receive, the page you started the chat on, your approximate country, and any name, email address or phone number you give us, so that we can answer you and follow up. From then on the chat keeps a random identifier in your browser's local storage, so that the conversation follows you from page to page. It sets no cookies. Answers may be written by an AI assistant that works from the content of this website; it runs on the provider's own servers, and your conversation is not sent to a third-party AI company. Please do not put sensitive information in the chat. Conversations are deleted 12 months after their last message. To see, correct or delete your information, contact us at [your contact address].

3. A note for your cookie banner

• The widget sets no cookies. It uses your visitor's browser local storage only, under keys that start with wc:.
• With visit recording on and no consent step, the widget stores a random identifier in local storage on the first page view, and may later store the identifier of an open conversation, a flag that the chat has offered its help once, and the chosen size of the chat window. In the European Union, the United Kingdom and some other places, the rules for cookies also cover local storage, and an identifier used to record visits is not "strictly necessary". If those rules apply to your visitors, use one of the options below, or switch visit recording off.
• Ask visitors for consent (Settings, Website and privacy) makes the chat ask before it records anything. Ask visitors in Europe shows the chat's own banner to visitors in the EU, the EEA, the UK and Switzerland, and to anyone whose country cannot be told; Ask everyone shows it to every visitor. It has Accept and Decline buttons side by side, your own sentence if you write one, and a link to your policy if you add it; visitors can change their answer from "Privacy choices" in the chat. Until a visitor agrees, the widget records nothing and stores nothing in their browser except their answer (key wc:<site>:k), exactly as in chat-only mode, and the chat still works.
• If your site already has a cookie banner, choose My site has its own cookie banner. The chat then shows no banner and waits for your tool. List the chat in your tool under analytics or statistics, and tell the chat the visitor's choice with AIChat('consent', true) or AIChat('consent', false) (the Install page has the one line to add first). With Cookiebot, CookieYes or OneTrust no code is needed: the chat reads their statistics, analytics or performance choice itself. You do not need to delay loading our script tag.
• In chat-only mode the widget stores nothing, and records nothing, until the visitor uses the chat. What it stores from then on exists to provide the chat the visitor asked for. The switch takes effect without changing the install code. To also stop the widget sending page details (which we discard in this mode), add data-track="off" to the script tag.
• Visitors whose browsers send Global Privacy Control are always handled as in chat-only mode, whatever your setting. The older Do Not Track header is not acted on.

4. Who is responsible for what

You are the controller of this information and we are your processor. The Data Processing Addendum is the contract between us, and its Annex 3 lists where the information is hosted, which you may need for your own notice. Our Privacy Policy describes what the widget does in full. If a visitor asks you for their information, you can find their conversations in the portal, and privacy@aichatforwebsite.com will help with anything the portal cannot do yet.