Privacy Policy

1. Information We Collect From Our Customers

When you subscribe to or inquire about Valiton, we collect:

Payment details. We use Stripe to process payments. Card numbers and security codes go directly to Stripe and are never received or stored by Valiton. Stripe's privacy notice: https://stripe.com/privacy

Prospecting information. Before you become a customer, we may have collected publicly available business information — business name, website URL, publicly listed business email address, and content published on your website — from public sources including business directories and your own website, in order to contact you about our service. You may opt out of further contact at any time using the unsubscribe link in any email or by writing to us.

2. Information Processed From Website Visitors

When someone uses a Valiton chatbot on our customer's website, the following is processed:

The text of the message they type. This is transmitted to our servers and to our AI provider in order to generate an answer, and is not stored after the response is returned.

Limited technical data. Our servers log IP address and timestamp for a short period for rate limiting, security, and abuse prevention. These logs are deleted on a rolling basis and are not linked to identified individuals.

What we do NOT do:

• We do not store conversation transcripts.
• We do not set cookies through the chatbot widget.
• We do not use browser storage to persist conversations between sessions.
• We do not track visitors across websites or build advertising profiles.
• We do not use visitor messages to train AI models.

Visitors should not enter sensitive personal information — payment card numbers, government identifiers, health information, or passwords — into a chatbot. Our customers are contractually prohibited from configuring chatbots to request such information.

Roles. As between Valiton and our customer, the customer is the controller of their visitors' data and Valiton acts as a processor on the customer's instructions. Our customers are responsible for providing any privacy notice or consent their visitors are entitled to.

3. How We Use Information

We process information to:

• Provide, operate, and maintain the chatbot service
• Build and refresh the knowledge base from a customer's website
• Generate answers to visitor questions
• Bill customers and maintain financial records
• Respond to support requests
• Send service and administrative notices
• Send marketing communications (customers may opt out at any time)
• Detect and prevent abuse, fraud, and security incidents
• Comply with legal obligations

We do not engage in profiling that produces legal or similarly significant effects, and we do not sell personal information or share it for cross-context behavioral advertising.

4. Artificial Intelligence and Subprocessors

The chatbot is powered by third-party AI services. When a question is asked, the question text and relevant excerpts of our customer's published website content are transmitted to an AI provider to generate a response.

Our subprocessors:

We have agreements with our AI providers under which submitted data is not used to train their models. We do not use customer data or visitor messages to train any model of our own.

This list may change. Material changes will be reflected in an updated version of this policy.

5. Disclosure of Information

We disclose personal information only:

• To the subprocessors listed in Section 4, to perform services for us
• When required by law, subpoena, or valid legal process
• To protect the rights, property, or safety of Valiton, our customers, or the public
• In connection with a merger, acquisition, or sale of assets, subject to this policy

We do not sell personal information, and we have not sold personal information in the preceding twelve months.

6. Retention

7. Security

We use reasonable technical and organizational measures to protect information, including encrypted transmission and access controls. No system is perfectly secure, and we cannot guarantee absolute security.

Our architecture reduces risk by design: because conversation content is not stored, there is no conversation database to breach.

8. Your Rights

Depending on where you live, you may have the right to:

• Know what personal information we hold and how we process it
• Access a copy of it
• Correct inaccuracies
• Request deletion
• Opt out of marketing communications
• Opt out of any sale or targeted-advertising sharing (we do neither)
• Appeal a denied request
• Not be discriminated against for exercising these rights

Residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have rights under state privacy laws.

To exercise any right, email luke@valiton.org or write to the address below. We will verify your identity before acting and will respond within the time required by applicable law. If we decline, you may appeal by replying to our response; if the appeal is denied you may complain to your state attorney general.

Website visitors: if you used a chatbot on a business's website and want to make a request, contact that business first — they control the interaction. You may also contact us directly. Note that because we do not retain conversation content, there is generally no conversation record for us to produce or delete.

9. Cookies and Tracking

The chatbot widget sets no cookies and uses no browser storage. Conversation history exists only in the page's memory during a session and is discarded when the page is closed.

Our own website, valiton.org, uses only cookies strictly necessary for the site to function. We do not use advertising or cross-site tracking cookies.

Because no uniform standard exists, we do not currently respond to Do Not Track browser signals.

10. Children

The Service is for businesses and is not directed at children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

11. International

Our servers and subprocessors are located in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.

12. Changes

We may update this policy. The "Last updated" date will change. For material changes affecting customers, we will provide notice by email.

13. Contact