Privacy Policy

Effective: March 17, 2026 · Gabby

1. Introduction

Gabby ("we", "us", "our") operates Gabby ("Service"). This Privacy Policy explains how we collect, use, and protect your information when you use the Service. By using Gabby, you agree to the practices described here.

2. Information We Collect

  • Account information: name, email address, and password when you register.
  • Business information: your website URL, company name, and any content you upload to build your knowledge base.
  • Chat conversations: messages exchanged between your website visitors and your AI chatbot, stored to provide the service and improve accuracy.
  • Usage analytics: conversation counts, message volume, and feature usage to help you understand your bot's performance.
  • Technical data: IP addresses, browser type, and access timestamps collected automatically for security and diagnostics.

3. How We Use Your Information

  • To provision and operate your AI chatbot.
  • To improve the accuracy and performance of the Service.
  • To send transactional emails (account notices, billing) and, with your consent, product updates.
  • To detect abuse, fraud, and security threats.
  • To comply with legal obligations.

4. Third-Party Services

We share data with the following sub-processors to deliver the Service:

  • Supabase — database and authentication hosting.
  • Anthropic Claude — AI language model powering chat responses. Conversation content is sent to Anthropic's API for inference.
  • Voyage AI — vector embeddings for knowledge base retrieval.
  • Vercel — application hosting and edge delivery.
  • Stripe — payment processing (when billing is enabled). We never store full card numbers.

We do not sell your data to third parties or use it for advertising.

5. Data Retention

Your data is stored for as long as your account is active. If you close your account or request deletion, we will delete your data within 30 days, except where retention is required by law.

6. Cookies

We use session-only cookies for authentication purposes. We do not use persistent tracking cookies or third-party advertising cookies.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate information.
  • Delete your account and associated data.
  • Export your knowledge base content.

To exercise any of these rights, email support@heygabby.com.

8. Children's Privacy

Gabby is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email and update the "Effective" date at the top of this page.

10. Contact

Questions about this policy? Contact us at support@heygabby.com.