Privacy Policy
Last updated: October 5, 2026
ChatStir.AI (“ChatStir”, “we”, “us”) provides AI chatbots that businesses add to their websites to answer visitors and capture leads. This policy explains what we collect and how we use it on chatstir.ai, in the ChatStir dashboard, and in the chat widget our customers place on their sites.
1. What we collect
From our customers (account holders)
- Account details: your name, email address, company and sign-in details.
- Sign in with Google: if you choose it, Google shares your name, email address, profile picture and Google account ID with us. We use them only to create and secure your account. We do not request access to your Gmail, Google Drive, Calendar, contacts or any other Google data.
- Chatbot settings: the content, branding, questions and integrations you configure.
- Billing: payments are handled by Stripe. We receive your plan and payment status; we do not receive or store full card numbers.
From visitors to our customers’ websites
- Conversations with the chat widget, and any details a visitor chooses to share, such as name, email, phone number or company.
- Technical data needed to run the widget, such as the page the conversation started on, browser type and approximate location from the IP address.
Usage data
We record how the dashboard and widget are used (for example, conversations started and leads captured) and use cookies that keep you signed in.
2. How we use it
To run ChatStir: answer visitors, capture and score leads, deliver them to you and the tools you connect, send account and transactional emails, bill subscriptions, provide support, keep the service secure, and improve it. We do not sell personal data.
3. AI processing
ChatStir’s replies are generated with Anthropic’s Claude models. Visitor messages and the chatbot’s instructions are sent to Anthropic’s API to produce replies and to score and summarize leads. Under Anthropic’s commercial terms, data sent through its API is not used to train its models.
4. Who we share it with
- Service providers that run ChatStir for us: cloud hosting, AI processing (Anthropic), payments (Stripe) and email delivery.
- Integrations you turn on: if you connect a CRM, a webhook, Zapier or Make, we send lead and conversation data to it as you configure.
- Legal reasons: when the law requires it, or to protect the rights and safety of our users and the public.
5. Our customers’ visitors
When a business uses ChatStir on its website, that business decides what the chatbot asks and what happens to the leads, and it is responsible for telling its visitors and obtaining any consent the law requires. Visitors with questions about their data should contact that business first; we will help it respond.
6. How long we keep it
Conversation and lead data is kept while your account is active, or up to 24 months after your last activity, unless you ask us to delete it sooner. Billing records are kept as long as tax and accounting law requires.
7. Your rights
You can ask to access, correct, export or delete your data by emailing support@twenty6red.com. We respond within 30 days. Depending on where you live, you may also have the right to object to or restrict processing, and to complain to your data protection authority.
8. Security
Data is encrypted in transit (TLS), and access to production systems is restricted to authorized personnel. No system is perfectly secure, so we also limit what we collect to what ChatStir needs.
9. Children
ChatStir is a business service and is not directed to children under 16. We do not knowingly collect their personal data.
10. Changes to this policy
If we make material changes, we will update the date above and, for significant changes, tell account holders by email.
11. Contact
Privacy questions or requests: support@twenty6red.com