Privacy Policy

Chiki is a chat assistant that businesses add to their websites. It answers visitors' questions from the business's own website content and helps them get in touch. Chiki is run by Fullsuite (“we”, “us”). This policy explains what personal information we handle, why, and your choices. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Two kinds of people we deal with

• Customers: businesses and the people who sign up and use the Chiki app to set up a chat assistant.
• Website visitors: people who use a chat assistant on a customer's website. For visitors, the business that runs the website decides what is collected and what happens next, and we handle the information on its behalf. If you have a question about a chat you had on a business's website, you can contact that business or us.

What we collect

From customers

• Account details: your email address and sign-in information.
• Workspace content: your business name, the website pages you choose for the assistant to learn from, FAQs and answers you write, form settings, appearance settings, and the email addresses you ask us to send form submissions to.
• Basic technical information needed to keep you signed in and the service secure.

From website visitors

• The chat itself: the questions you ask and the assistant's replies.
• Details you choose to share, such as your name, email address, phone number, property address or anything else you type or enter in a form.
• Files you choose to attach, such as photos or PDFs. Files are checked for harmful content and virus-scanned.
• How you arrived: the website and page where you opened the chat, the site that referred you, and any campaign tags in the page address.
• A random identifier stored in your browser so you can pick up your chat where you left off. Your IP address is used only in a one-way, scrambled form to stop abuse and is not stored.

Please don't share sensitive information (such as health or financial details) in a chat unless the business has asked for it.

How we use it

• To run the service: answering questions, saving chats and form submissions for the business, and emailing submissions to the people the business chooses.
• To keep the service safe and working: preventing abuse, limiting heavy use, scanning files and fixing problems.
• To contact customers about their account and the service.

We don't sell personal information, we don't use it for advertising, and we don't use customers' or visitors' chats to train AI models.

AI processing

To write each answer, the visitor's question and relevant passages from the business's website are sent to an AI model provider through Vercel's AI Gateway. The providers we use today are OpenAI and Google. They process this information to produce the reply. AI answers can be wrong, which is why the chat shows the pages each answer comes from.

Who we share it with

We share personal information only with the business whose website you chatted on, and with service providers who help us run Chiki:

• Supabase: database, sign-in and file storage (Singapore).
• Railway: application hosting (Singapore).
• Vercel AI Gateway, OpenAI and Google: AI answers (mainly the United States).
• Resend: sending form-submission emails, once a business turns them on (United States).

Because these providers store or process information outside Australia, your information may be held in Singapore and the United States. We choose providers with strong security and contractual protections. We may also disclose information if the law requires it.

How long we keep it

• Chats, contacts and form submissions are kept for the business until it deletes them or closes its account.
• Files visitors attach are deleted automatically after the period the business chooses (between 30 days and 2 years). Files that were never sent are deleted within a day.
• When a customer closes their account, we delete their workspace data within 30 days, except where the law requires us to keep it.

Cookies and browser storage

The Chiki app uses essential cookies to keep you signed in and to remember the last page you used. The chat on a business's website stores a random identifier and your chat progress in your browser so the conversation continues between pages. We don't use advertising or tracking cookies.

Security

Information is encrypted in transit and access is limited to the business's own team and the people who run the service. Secret keys stay on our servers. No system is perfectly secure, so if we become aware of a data breach that is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner as the law requires.

Your choices

You can ask us for a copy of the personal information we hold about you, or ask us to correct or delete it, by emailing mazen@fullsuite.agency. If your request is about a chat on a business's website, we may pass it to that business, since it controls those records. We will respond within 30 days.

Complaints and contact

Questions or complaints about privacy can be sent to mazen@fullsuite.agency. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

We'll update this policy when the service changes, and change the date at the top. If a change is significant, we'll tell customers before it takes effect.