Privacy Policy

How RAG Chats, Inc. collects, uses, stores, and protects your personal data.

Last updated: May 29, 2026

This document is a draft pending final legal review. It is provided for informational purposes only and does not yet constitute legal advice.

1. Introduction

RAG Chats, Inc. (“RAG Chats,” “we,” “us,” or “our”) provides a platform for building and operating retrieval-augmented chat assistants. This Privacy Policy explains what personal data we collect, how we use it, and the choices and rights you have. It applies to our websites, applications, APIs, and related services.

By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use our services.

2. Information We Collect

Information You Provide

Account information such as your name, email, and password.
Payment information, which is processed by our payment provider, Stripe.
Content you upload, including documents and files.
Communications with us, such as support requests.
Feedback and survey responses.

Information We Collect Automatically

Log data, including IP address, browser type, and device information.
Usage data, such as features used and pages viewed.
Cookies and similar technologies.
Widget interaction data.

Information from Third Parties

OAuth providers, such as Google and GitHub.
Analytics providers.
Payment processors.

3. How We Use Your Information

To provide, maintain, and improve our services.
To process transactions and manage your subscription.
To send service-related communications.
To send marketing communications, where you have consented.
For security, fraud prevention, and abuse detection.
To comply with legal obligations.
For analytics and research to understand how our services are used.

We may share your data with:

Service providers that support hosting, analytics, and payments.
Business partners, where you have consented.
Authorities or third parties when required by law or legal process.
An acquirer in connection with a merger, acquisition, or asset sale.

We do NOT:

Sell your personal data.
Share your data for third-party advertising.
Train AI models on your private data.

5. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

Account data: while your account is active, plus 30 days.
Uploaded content: while your account is active.
Usage logs: 90 days.
Payment records: as required by law (typically 7 years).

6. Data Security

We use a range of technical and organizational measures designed to protect your data, including:

Encryption of data at rest and in transit.
Access controls limiting employee access to personal data.
Regular security audits and reviews.
Incident response procedures.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

All Users

Access the personal data we hold about you.
Correct inaccurate data.
Delete your account.
Export your data.
Opt out of marketing communications.

EU/EEA Users (GDPR)

Right to erasure.
Right to data portability.
Right to restrict processing.
Right to object to processing.
Right to lodge a complaint with a supervisory authority.

California Users (CCPA)

Right to know what personal information is collected.
Right to delete personal information.
Right to opt out of the sale of personal information.
Right to non-discrimination for exercising your rights.

8. International Data Transfers

Your data is stored in the United States. Where we transfer personal data from the EU/EEA, we rely on appropriate safeguards such as the EU-US Data Privacy Framework and Standard Contractual Clauses.

9. Children’s Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we learn that we have collected such data, we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

11. Cookies We Use

We use cookies and similar technologies to operate and improve our services. The table below summarizes the primary cookies we use.

Cookie	Purpose	Duration
session	Authentication	Session
_ga	Analytics	2 years
preferences	User settings	1 year

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact our privacy team at privacy@ragchats.com.