Last updated: March 22, 2025

Privacy Policy

Debales LLC ("Debales," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered SaaS services, including our AI chatbot and analytics tools, available at https://debales.ai/.

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use our Services.

1. Information We Collect

We collect personal and non-personal information from both our clients (businesses using Debales) and end users (visitors interacting with our AI-powered tools on client websites).

A. Information You Provide Directly

Client Information:

Name, email address, phone number (optional, unless made mandatory by our clients)
Business name and details related to Debales' services

End-User Information (Collected via Chatbot and Forms):

Name, email, and phone number (if entered by the user)
Conversation data with the AI chatbot
Customer preferences and product recommendations

Support and Communication Data:

When you contact us, we collect information such as your email address and the content of your inquiry

Email Integration Data:

Email content and metadata accessed through Gmail and Outlook APIs for our auto-reply service

B. Information We Collect Automatically

Browsing Behavior (End Users on Client Websites)

URLs visited, pages viewed, and items added to cart
Interaction data with our AI chatbot
Non-precise geolocation (city, state, and country) via third-party tools (e.g., IP-based lookup services)
Browser type, device information, operating system

C. Information Collected via Third Parties

We may receive aggregated analytics and behavioral data from services like Mixpanel and our own custom analytics.
Our advertising partners may collect and use data to provide targeted marketing about our services (you can opt-out, see Section 7).

2. How We Use Your Information

We use the collected data for the following purposes:

Purpose	Legal Basis (GDPR)
Providing and improving our AI-powered services	Contract performance (for clients)
Personalizing chatbot responses	Legitimate interest (for better user experience)
Conducting internal analytics on chatbot interactions and product recommendations	Legitimate interest (product improvement)
Marketing our services to potential clients	Consent or Legitimate interest
Compliance with legal obligations and security enforcement	Legal obligation
Processing email content to generate automated replies	Contract performance (for clients)

We do not process special category data (e.g., biometric, health, financial data) or knowingly collect data from children under 16. If we discover such data, we will delete it promptly.

4. Email Auto-Reply Service Compliance

Google API Limited Use Compliance

Our application's use of information received from Google APIs adheres to Google's API Services User Data Policy, including the Limited Use requirements.

Important: We do NOT train our AI/ML models using any data obtained through Gmail or Outlook APIs. Email data accessed through these integrations is used solely to provide our email auto-reply functionality.

5. Cookies & Tracking Technologies

We use cookies, local storage, and session storage to enhance user experience. These include:

Type of Cookie	Purpose
Essential Cookies	Required for core functionalities
Analytics Cookies	Track website performance (e.g., Mixpanel)
Marketing Cookies	Deliver targeted advertising (if applicable)

You can manage cookie settings via your browser.

6. Data Retention & Security

A. Data Retention Policy

We retain personal data only as long as necessary for the purposes stated in this policy, including compliance with legal obligations. Data retention duration includes:

Client Accounts: Stored as long as the account is active
End-User Chatbot Interactions: Retained based on client preferences or until deletion is requested
Browser Activity Data: Retained for analytical purposes only (no direct identifiers stored)

B. Security Measures

We use industry-standard security measures, including:

Access controls (only authorized users can view data)
Encryption for data transmission
Secure cloud storage solutions

However, no system is 100% secure. If we detect a security breach, we may notify affected users via email or our website.

7. International Data Transfers

As a U.S.-based company, Debales LLC may transfer data outside the U.S. or the EU.

For GDPR compliance, we implement Standard Contractual Clauses (SCCs) where applicable.
By using our Services, you acknowledge that your data may be transferred to countries with different data protection laws.

8. Your Rights & Choices

A. Your Rights (GDPR, CCPA, CPRA, CalOPPA)

Depending on your location, you have the right to:

✅Access Your Data – Request a copy of your personal data.
✅Correct Your Data – Ask for updates or changes.
✅Delete Your Data – Request data erasure (except where required for legal compliance).
✅Object to Processing – Opt out of certain types of data usage.

B. Opting Out

To opt out of analytics tracking, disable cookies in your browser settings.
To stop marketing communications, unsubscribe from emails or contact us at support@debales.ai.
To delete or modify data, email us with "Data Correction or Deletion" in the subject line.

9. Updates to This Policy

We may update this Privacy Policy periodically. The latest version will always be posted at https://debales.ai/privacy-policy.

If there are significant changes, we will notify users via email or website announcements.

10. Contact Us

If you have any privacy-related questions or concerns, reach out to us:

📧 Email: support@debales.ai

📍 Address: Debales LLC, San Francisco, California