GDPR Notice
Last updated: July 2026 · Template — review with your lawyer before launch.
Roles
For business account data we are the controller. For customer conversation data processed on behalf of a business, the business is the controller and NibaChat Agent is the processor.
Legal bases
Contract performance (providing the service), legitimate interest (security, abuse prevention), and consent where required.
Your rights
Access, rectification, erasure, restriction, portability, and objection. Contact privacy@nibachat.agency; we respond within 30 days.
Transfers
Where data leaves the EEA, standard contractual clauses or equivalent safeguards apply.
Complaints
You may lodge a complaint with your local supervisory authority.