Privacy Policy

CurbChat (“we”, “our”, “us”) operates the CurbChat platform at curbchat.ca. This policy explains what personal information we collect when you use our service, how we use it, and the rights you have over it.

We are based in Kelowna, British Columbia, Canada. This policy is written in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable British Columbia privacy law.

By creating a CurbChat account or using our platform, you agree to the practices described in this policy. If you do not agree, please do not use the service.

We collect only the information required to provide the CurbChat service. All data below is provided directly by you during signup or while using the dashboard — we do not collect it passively or from third parties.

• Account information: your name, email address, business name, website URL, and industry type — collected when you sign up.
• Dashboard content: the system prompt you write, the styling customizations you configure, and the lead capture settings you set up.
• Usage metrics: aggregate chat frequency and volume data (e.g., how many conversations your widget initiated per day). This is used to power your analytics dashboard.
• Payment information: billing details are collected and processed by Stripe. CurbChat does not store your card number or payment credentials on our servers.
• Lead submissions: when a visitor fills out the contact form in your chatbot widget, that data is routed through Web3Forms directly to your inbox. CurbChat does not retain lead form submissions.

We do not store, log, or retain the content of conversations visitors have with your chatbot. Each conversation is processed in real time and discarded — no message history is saved on our servers.

Visitor messages are processed through DeepSeek's API at inference time using the system prompt you configure. Please refer to DeepSeek's privacy policy for information on how they handle inference data.

We also do not collect: visitor IP addresses, browser fingerprints, device identifiers, or any personally identifiable information about the end users of your chatbot widget.

CurbChat uses the DeepSeek API to power chatbot responses. When a visitor sends a message to your widget, that message is transmitted to DeepSeek alongside the system prompt you have authored in your dashboard.

You, as the business owner, are solely responsible for the content of your system prompt. CurbChat provides the tools to write and edit it — we do not review, moderate, or alter the prompt you deploy.

No conversation content is stored by CurbChat after the API call completes. DeepSeek’s own data handling is governed by their privacy policy.

All CurbChat account data — your profile, dashboard settings, prompt content, and styling configurations — is stored in Supabase. Supabase encrypts data at rest and in transit, and is SOC 2 Type II certified.

Payment processing is handled by Stripe, which is PCI DSS Level 1 certified. CurbChat does not store any raw payment card data.

Data may be stored on servers located outside of Canada as part of Supabase’s and Stripe’s global infrastructure. We take appropriate contractual measures to ensure this data remains protected in accordance with PIPEDA.

We use the information we collect to:

• Create and maintain your account and dashboard
• Power your chatbot widget and prompt editor
• Display analytics about your chatbot’s usage
• Process your subscription payment through Stripe
• Send you service-related communications (e.g., billing receipts, account notices)
• Respond to support requests you submit
• Comply with legal obligations

We do not sell, rent, or trade your personal information to any third party, advertiser, or data broker — ever.

Under PIPEDA, you have the right to access the personal information we hold about you, to request corrections, and to request that we delete your data. To exercise any of these rights, email us at contact@curbchat.ca.

We will respond to all data requests within 30 days. Deletion requests will result in the permanent removal of your account and associated data from our systems. Data that we are legally required to retain (e.g., billing records) may be kept for the minimum period required by law.

You may also cancel your account at any time from within the dashboard. Cancellation does not automatically delete your data — if you would like your data removed, please submit a deletion request via email after cancelling.

CurbChat uses session cookies to maintain your authenticated state within the dashboard. These cookies are strictly necessary for the service to function and do not track you across other websites.

We do not use advertising cookies, cross-site tracking pixels, or any third-party analytics that fingerprint individual users. The usage metrics we collect (chat volume) are aggregate and do not identify individual visitors.

CurbChat is intended for business use by adults. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us at contact@curbchat.ca and we will delete it promptly.

We may update this privacy policy from time to time. When we do, we will revise the effective date at the top of this page. For material changes, we will notify you via the email address on your account at least 7 days before the change takes effect. Continued use of the service after that date constitutes acceptance of the updated policy.

If you have any questions about this policy or your personal data, reach out at contact@curbchat.ca. We are based in Kelowna, BC, Canada and will respond within 30 days.