Privacy Policy

Last updated: November 2024

DEFINITIONS

We / us / our – FLORATE LIMITED

OVERVIEW AND GENERAL TERMS

At FLORATE LIMITED, we prioritize the privacy of our users. This Privacy Policy outlines our data protection practices, detailing the types of information we may process when you access our Website at https://chatboxapp.ai/. The policy applies to all users of our Website ("Users").

If you have any questions or concerns, please don’t hesitate to reach out via our support form.

To opt out of data usage, you may select the "DO NOT USE MY DATA" option. For further details about data usage for interest-based advertising, click here.

The term "personal data" or "personal information" refers to any information that relates to an identified or identifiable natural person.

Personal data refers to any information that pertains to a natural person who can be directly or indirectly identified, particularly through an identification number or by one or more unique factors related to their physical, physiological, mental, economic, cultural or social status.

We act as the data controller under the GDPR, unless otherwise specified.

FOR CALIFORNIA CONSUMER PRIVACY ACT OF 2018 (CCPA) PRIVACY NOTICE CLICK HERE (anchor)

I. AGE RESTRICTIONS AND CHILDREN'S PRIVACY

Our Website is intended for individuals who are 18 years or older. We do not knowingly collect or solicit personal information from anyone under the age of 18. If you are under 18, please do not use or submit any information on this Website or through its features.

If we discover that personal information has been collected from a child under 18 without verifiable parental consent, we will promptly delete that information. If you believe we may have collected information from or about a child under 18, please contact us immediately.

II. TYPES OF INFORMATION PROCESSED

We may process various categories of information, including:

Functional Data

Payment Information

Automatically Processed Data

Contact Information

Additional personal information

Please refer to Section III for further details on each category.

III. THE PURPOSES OF PROCESSING DATA

We use your information for the following purposes:

(i) To provide the Website and its services:

We process your information to provide the Website and its services, ensuring full functionality and usability. This involves processing: Functional Data, Payment Information and Automatically Processed Data as outlined below, which are essential for accessing and using the Website.

The legal basis for this processing is the performance of our contract with you, as stated in our Terms of Use.

(a) Functional Data
To fulfill our contractual obligations and provide the requested services, we require functional data. This is necessary to guarantee the full functionality of the Website.

User Content. This includes any text or other content that you enter into the message field and send through the Website ("Input"), as well as any text or other content generated by AI via the Website ("Output"). You may use, share, and otherwise exploit your User Content for your purposes, subject to your compliance with the rules and restrictions outlined in our Terms of Use. However, any use of User Content is at your own risk, and you assume all risks and responsibilities associated with such use. You are solely responsible for ensuring compliance with applicable laws when using User Content.

Please note that we use third-party service providers such as Google (as defined below in Section V), OpenAI, L.L.C., Anthropic Ireland Limited, and Anthropic PBC for processing and creating AI-generated User Content. We also engage the third-party service provider Phrasly LLC to check whether your text has been written by AI within the in-app feature “AI Detector.” Additionally, if you choose to try the “GPT + Internet” feature, your Input will be processed by our third-party service providers, Microsoft Corporation and Google, to obtain Internet search results pertinent to your Input and update your Output accordingly.

Please refer to Section V to learn more about the privacy policies and practices of OpenAI, L.L.C., Anthropic Ireland Limited, Anthropic PBC, Microsoft Corporation, and Google.

Contact Information. This includes your name, email address, and any other information you provide when contacting us via email or support form. We store and process this information using our cloud storage provider, Amazon.com, Inc. We use this information to respond to your inquiries, fulfill your requests, and provide you with requested services or communications.

Authorization Data.

You may create an account on the Website and sign in via your Apple or Google account. In this case, the following categories of Authorization Data will be processed: method of registration on the Website (e.g., sign-in with Apple or Google), Client ID, and other authentication information according to the OAuth2 protocol. Please note that in this case we do not access, share, or otherwise use your email address, name, or profile picture, if you choose to add it (“Authorization user data”). The sign-in process is managed through the Apple or Google OAuth2 protocol, enabling sign-in via your Apple or Google account. For any issues related to the use of Apple or Google user data through the Apple or Google API, please contact Apple or Google directly. For more information on how Apple and Google share your data when linking your Apple or Google account, as well as Apple or Google’s contact details, please refer to Section V of this Privacy Policy.

You may also create an account on the Website and sign in via email. In this case, the following categories of Authorization Data will be processed: method of registration on the Website (e.g., sign-in with email), your email address, and other necessary authentication information.

(b) Payment Information

Our e-commerce provider is responsible for securely processing and charging for purchases, and for handling your personal information in a safe and secure manner. We do not have access to or use your credit or debit card information as this is processed as part of the contract between you and us.

(ii) To improve the Website and personalize your experience:

We use Automatically Processed Data to analyze how users interact with the Website, identify areas for improvement, and test new features and functionality. This helps us to continuously improve the Website and provide a better service. We may use automatically processed information to personalize your experience within the Website. For example, we may use this information to show you content that is tailored to your interests, or to suggest features or services that may be of interest to you.

The legal basis for this processing is our legitimate interest in improving the Website and delivering the best possible experience for our users.

(c) Automatically Processed Data
Log file information. When you access the Website, log file information is automatically generated and reported. Additionally, this information may be provided when you install the Website on your device. Our analytics tools automatically record specific log file information when you use the Website, such as the start and stop time and date of usage, and how you interact with the Website.

Mobile Device Data, including “device identifiers”. Device identifiers are small data files or similar data structures stored on or associated with your mobile device, which uniquely identify your mobile device (but not your personality). Device identifier enables generalized reporting or personalized content and ads by the third parties.Certain device identifiers are processed to improve the quality of customer support. We automatically process information about the device itself (type of device, type of operating system and its version, model and manufacturer, screen size, screen density, orientation, audio volume and battery, battery life, loading time, latency, framerate, device memory usage), information about the Internet connection (mobile carrier, network provider, network type, IP address, timestamp and duration of sessions, speed, browser), location-related information (IP address, the country code/ region/ state/ city associated with your SIM card or your device, language setting, time zone, neighboring commercial points of interest (eg. “coffee shop”)), other device identifiers: e.g. user identifiers (if they are set up by the Website’s developer). In case you submit a support request, the device identifiers to be processed additionally comprise your device ID (identification number of your mobile device) and your user ID (the number assigned to the Website upon its installation at your device). The processing of user ID and device ID enables us to review your support request in a more detailed manner as applied to your particular case. This therefore may allow us a) to expedite your support request (e.g. complete troubleshooting); and, if needed b) to approach you with a tailor-made solution for fixing the issue being of concern for you.

Cookies and similar technologies. When you use the Website, cookies and similar technologies may be used (pixels, web beacons, scripts). A cookie is a text file containing small amounts of information which is downloaded to your device when you access the Website. The text file is then sent back to the server each time you use the Website. This enables us to operate the Website more effectively. For example, we will know how many users access specific areas or features within our Website and which links or ads they clicked on. We use this aggregated information to understand and optimize how our Website is used, improve our marketing efforts, and provide content and features that are of interest to you. We may ask advertisers or other partners to serve ads or services to the Website, which may use cookies or similar technologies.

Information about the applications. Name, API key (identifier for application), version, properties of our Website can be reported for automated processing and analysis. Some services also record the list of applications and/or processes which are installed or run on your device.

Ad-related information. Information related to advertisements that you view, such as the time and date the ad is shown, whether you clicked on it or if it resulted in a conversion event, the content and type of the ad (such as text, image, or video), where it was displayed in the Website, and your response to the ad, may be reported.

In-Website Events. Analytics tools integrated into our Website automatically capture and store data related to your in-Website activities, such as completing tutorial steps, making in-app purchases or payments, triggering custom events, progressing through levels or stages, and any opt-out mechanisms used to limit data processing.

The data is processed via third-party automatic data processing technologies, such as advertising or analytics tools, to analyze certain information sent by your device through our Website (e.g., Identity For Advertisers for iOS devices/ Advertising ID or Android ID for Android devices), with your permission. This data is typically non-personal, meaning it cannot be directly linked to any specific individual, and we only access it in an aggregated form. However, some of these integrated tools (please see Section V for a list) may conduct automated processing of your personal data, including profiling. Profiling involves any form of automated processing of personal data used to evaluate certain personal aspects relating to you, particularly to analyze or predict aspects concerning your personal preferences, interests, behavior, location or movements (please refer to the list of data below). Automatic data processing technologies will start processing information as soon as you allow our Website to track your activity. You may withdraw your permission at any time by checking the opt-out options in Section VIII below.

Please note that we do not have control over the information provided automatically to advertising or analytics tools, and therefore cannot take responsibility for the processing of such information. It is important to be aware that some services engage in personal data profiling and may obtain information related to your personality or device through technologies that are not under our responsibility. If your user ID is linked to your Facebook account, Facebook may use your device information in conjunction with categorized data that have already been recorded in its databases, such as your age, gender, or other demographic indicators. We do not supervise, control, or guarantee how third parties handle your personal data that may be collected through means other than our app. If you have any questions about the disclosure of your personal information, please direct them to the third parties involved (refer to Section V).

(iii) To communicate with you:

We may use your Contact Information to communicate with you about your use of the Website and our services, such as providing updates, marketing notifications, responding to your inquiries, and offering customer support. We may also conduct surveys, which you are free to participate in to share your user experience with the Website.

The legal basis for this processing is the performance of our contract with you, as stated in our Terms of Use.

(d) Contact Information: your name, your email address and data that you might enter and upload as a part of your support request or while you take part in our in-app surveys.

(iv) To conduct interviews about your experience with the Website.

(e) Additional personal information: name (real or alias), image and/or certain biographical data, speech, voice and/or appearances.
Please note that we only hold interviews with you and therefore process the respective personal data subject to your explicit consent.

(v) To enforce our policies and protect our rights:

We may use all types of information we process to enforce our policies and protect our rights. This includes investigating and preventing fraud, spam, unauthorized activities, and ensuring compliance with legal obligations.

If your information is used for any purpose not listed here, we will notify you and obtain your consent as required by applicable law.

IV. HOW LONG WE KEEP AND USE YOUR DATA

We will keep your personal information only for as long as necessary to provide the functional service of the Website and to fulfill our legal obligations. If you decide that you no longer want us to use your information that we physically access and store, you can request that we delete your personal information and close your account.

However, some data may still be stored for a limited period of time (but no longer than necessary) if required by law (such as for taxation, accounting, or auditing purposes) or to maintain the safety and backup of data, prevent fraud, or other malicious acts.

V. SHARING OF DATA

When we integrate external services, we choose third-party providers who apply robust technical and organizational measures to safeguard your personal data. However, we cannot guarantee the security of any information shared with these providers, and we are not liable for accidental loss or unauthorized access due to their actions.

We do not rent or sell your personal data to third parties. However, we may share information such as cookies, log files, device identifiers, and location data with third-party providers of automatic data processing technologies for the Website. We do not control these providers' tracking technologies or their use.

Additionally, we may share certain data, such as cookie information, with third-party advertising partners. This enables third-party ad networks to show you targeted ads based on their assessment of your interests.

In order to provide us with the necessary infrastructure for the delivery and improvement of our services, we may engage the following third-party service providers:

OpenAI, L.L.C. (USA), AI-generated content provider	Please check with the OpenAI Privacy Policy at https://openai.com/privacy/ To learn more information about applicable license terms with respect to User Content, visit https://openai.com/terms/
Microsoft Corporation (USA), Internet search results provider	Please check with the Microsoft Privacy Statement at https://privacy.microsoft.com/en-us/privacystatement
Anthropic, PBC (USA), Anthropic Ireland, Limited (Ireland), AI-generated content providers	Please check with the Anthropic Privacy Policy at https://www.anthropic.com/legal/privacy To learn more information about applicable terms of usage with respect to User Content, visit https://www.anthropic.com/legal/aup To learn more information about the applicable license terms with respect to User Content, visit https://www.anthropic.com/legal/consumer-terms
Amplitude Inc. (USA), Analytics service provider	Please check with the Amplitude Privacy Policy at https://amplitude.com/privacy
WebsitesFlyer Inc. (USA), Analytics service provider	Please check with the WebsitesFlyer Privacy Policy at https://www.appsflyer.com/legal/services-privacy-policy/
Google, AI-generated content provider via the Gemini API, survey forms provider, user authorization tool Google shall mean Google LLC (USA) as well as other legal entities defined at: https://cloud.google.com/terms/google-entity	Please check with the Google Privacy Policy at https://policies.google.com/privacy To learn more information about the applicable Terms of Usage with respect to User Content visit https://ai.google.dev/gemini-api/terms To learn more information about the way Google shares your data using Google account linking visit Google website
Firebase / Google, User authentication, Internet search results, analytics and marketing service provider	Please check with the Firebase (Google) Privacy Policy at https://policies.google.com/privacy and https://firebase.google.com/support/privacy?hl=en
Ideogram AI, Inc. (Canada), AI-generated content provider	Please check with the Ideogram AI Privacy Policy at https://ideogram.ai/legal/privacy To learn more information about applicable Usage Terms please visit https://ideogram.ai/legal/usage-policy
Intuit Inc.,The Rocket Science Group LLC (USA) and its affiliates, marketing and automations platform (Mailchimp)	Please check with the Intuit Privacy Policy at https://www.intuit.com/privacy/
Phrasly LLC (Delaware, USA) Provider of service for checking if a text is written by AI (AI Detector feature)	Please check with the Phrasly Privacy Policy at https://phrasly.ai/terms/privacy
Qonversion Inc. (USA), In-Website subscription implementation and revenue analytics service	Please check with the Qonversion Privacy Policy at https://qonversion.io/page/privacy
Google Analytics (Google LLC)	Google Privacy Policy: https://policies.google.com/privacy?hl=en How Google uses information from sites or apps that use its services: https://policies.google.com/technologies/partner-sites?hl=en https://support.google.com/analytics/answer/6004245 (see section ‘Information for visitors of sites and apps Using Google Analytics’)
PayPal, Inc. / PayPal (Europe) S.à r.l. et Cie, S.C.A.	Please check with the PayPal Privacy Policy at: https://www.paypal.com/us/legalhub/privacy-full
Stripe Inc. / Stripe Payments Europe Limited	Privacy check with the Stripe Privacy Policy at: https://stripe.com/privacy https://stripe.com/privacy-center/legal
Facebook (Meta Platforms, Inc.)	Privacy check with the Facebook Privacy Policy at: https://www.facebook.com/privacy/explanation

For more information on the privacy options and services provided by our Website, including instructions on how to opt-out, please refer to the relevant websites and privacy policies.

Our Website may contain links to third-party websites or services, and you may also access our Website from a third-party site. Please be aware that we are not responsible for the privacy practices of these third parties, including the information and content they may contain. Any risks related to the use of these third-party websites or resources are solely your responsibility.

Please note that certain third-party providers may engage sub-processors. This implies that your personal data collected by third-party providers can be shared with affiliates as well as other persons engaged thereby. If you want to learn more about the cases of sharing your personal data with sub-processors as well as the scope of your personal data shared therewith please refer to the respective websites and privacy policies of the third-party providers.

We may disclose your personal information in situations where it is necessary for legitimate reasons, such as public interest or in other unforeseen circumstances as required by law. We may also disclose your personal information in good faith to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

Additionally, if we are involved in a merger, acquisition, or sale of all or a portion of our assets, we will notify you via prominent notice in our Website of any change in ownership or usage of your personal information, as well as any options you may have regarding your personal information.

VI. INTERNATIONAL DATA TRANSFERS

We and third-party organizations that provide automatic data processing technologies for the Website or our third-party advertising partners may transfer the information processed automatically across borders and from your jurisdiction to other countries or jurisdictions around the world.

Please be aware that this means we may transfer information, including personal information, to a country and jurisdiction that does not have the same data protection laws as in your jurisdiction. As a result, your personal information may be transferred to a third country, a territory, or one or more specified sectors within that third country, or to an international organization where data protection and confidentiality regulations may not provide the same level of protection for personal data as your jurisdiction does.

By using the Website, you agree that we may transfer your personal data to any third country, a territory, or one or more specified sectors within that third country, or to an international organization.

For data storage purposes, we use the services of hosting providers. We take your privacy seriously and, where possible, encrypt your personal data before sending it to the hosting providers for storage. Please note that we only work with hosting providers that have passed our security and reliability checks.

VII. EXERCISING YOUR RIGHTS

Applicable data protection laws give you certain rights regarding your personal information. You have the following options in relation to your personal information that was collected:

(i) Data Access and Portability. You can request copies of your personal information.

(ii) Change or Correct Data. Where you cannot update data by yourself through your account, you have the right to ask to correct, change, update or rectify your data.

(iii) Data Retention and Deletion. The user data is generally retained for as long as your user profile is in existence or as it is needed to provide the relevant services. However, specific retention times can vary based on context of the processing performed. You have the right to ask to delete all or some of the personal data that is held about you.

(iv) Restriction of Processing. Under certain circumstances, you may have the right to limit the ways in which your personal information is used.

(v) Exercising the right to know about data sharing. You have the right to know whether your data is shared with third parties. Detailed information on this issue is contained in section IV of the present Privacy policy, however, if you have further questions in this regard, you can contact us at any time.

(vi) Lodge a complaint. You can lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR

You can exercise any of the rights described above by contacting us through our email or contact form. However, please note that we can only ensure the aforementioned rights with respect to the information that we physically access and store.

If your personal information is being processed automatically, you may have the right to object to such processing in certain circumstances. If your personal information is being processed for direct marketing purposes, you may ask us to stop processing your data for these purposes. To exercise this right, please contact the third-party services listed in Section V of this Privacy Policy to learn how to object to the processing of your data. Many of them provide clear instructions on their privacy pages, functional API, or other options.

VIII. HOW TO OPT OUT

You can manage or disable the collection and processing of certain information related to your use of the Website, especially information that is processed automatically. You have the option to accept or reject cookies through your browser settings (Cookies Opt-Out):

Browser Settings: Most browsers automatically accept cookies, but you can modify these settings to reject cookies if you prefer. Refer to your browser's help section for specific instructions.
Third-Party Cookies: To disable cookies from third-party networks, visit the Network Advertising Initiative’s opt-out page and follow the instructions.

For comprehensive guidance on managing cookies in different browsers, you can visit www.allaboutcookies.org.

IX. SECURITY OF DATA

We take the security of your personal information seriously and have implemented measures to protect it from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. We follow industry-standard practices to protect the personal information submitted to us during transmission and while in our possession.

To safeguard your personal information, we implement technical and organizational measures that align with data protection principles. We use encryption algorithms, including hashing where feasible, to secure your personal data.

However, it's important to note that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we take appropriate measures to protect your personal data, we cannot guarantee its absolute security. In the event of a breach of security that compromises your personal information, we will notify you promptly as required by applicable law.

● Data Retention and Deletion. The user data is generally retained for as long as your user profile is in existence or as it is needed to provide the relevant services. However, specific retention times can vary based on context of the processing performed. You have the right to ask to delete all or some of the personal data that is held about you.

If you have any questions about the security of our Website, you can contact us through the contact form.

X. CHANGES TO THE PRIVACY POLICY

To stay current with our practices and legal obligations, we make regular updates to this Privacy Policy.

If we make any changes to this Privacy Policy, we will update it and post the revised version on this page and other relevant locations. We may also provide you with additional forms of notice regarding the changes, as appropriate in the circumstances.

XI. HOW YOU CAN CONTACT US ABOUT THIS PRIVACY POLICY

If you have any questions regarding this Privacy Policy, please feel free to reach out to us via our contact form or by email.

CALIFORNIA CONSUMER PRIVACY ACT OF 2018 (CCPA) PRIVACY NOTICE

California residents are entitled to request, in accordance with the CCPA:

the categories of personal information that is processed;
the categories of sources from which personal information is obtained;
the purpose for processing of user personal data;
the categories of third parties with whom we may share your personal information;
the specific pieces of personal information that we might have obtained about a particular user provided that the data provided in the request is reliable enough and allows to identify the user.

Please take the time to read this Privacy Notice and Privacy Policy carefully. By using the Website, you acknowledge that you have read, understood, and agree to these terms.

To navigate through this Privacy Policy, please use the provided links.

PERSONAL DATA. Learn about the categories, sources, processing methods, and purposes of personal data in Section III >> Note that under the CCPA, personal information excludes de-identified or aggregated consumer information.

SHARING OF DATA. Learn about the methods of sharing your information in Section V >> Please be aware that all third-party processors of user data are service providers who use such information in accordance with a contractual agreement and for a business purpose. To prevent the sharing of cookies with service providers, please consult your device settings and follow the opt-out instructions as detailed above in Section VIII. >>

SALE OF DATA. We do not engage in the sale of any of your personal data to third parties.

CHOICES TO OPT-OUT. If you would like us to stop processing your personal data, please reach out to us using the contact form. Please note that in many cases, the Website cannot function without functional data. In such cases, we may suggest removing the Website from your device.

CONSUMER INQUIRY. If you wish to request access, portability, or deletion of your personal information, please get in touch with us using the provided contact form.

When submitting a request, please take note of the following: (a) include the wording "Your rights to maintain confidentiality in the state of California" in the text of your appeal if applicable; (b) describe your request with enough detail for us to understand and respond to it properly; (c) provide sufficient information to allow us to reasonably verify your identity (your name, address, city, state, zip code, and email address). We may use this information to ask you security questions to verify your identity. If you are making a request through an authorized agent, they must provide written authorization or a power of attorney signed by you to confirm their authority to act on your behalf.

In order to fulfill your request for personal information or deletion, we must be able to verify your identity and confirm that the personal information pertains to you. If we cannot verify your identity or the authenticity of the request, we may not be able to fulfill your request or respond to your request. To verify your identity, we may require additional information or documentation. We may also perform identity checks, including through third-party verification services. These measures are in place to protect the security and privacy of your personal information and prevent unauthorized disclosure or modification.

We will handle any personal information provided in a verifiable consumer request with care and ensure that it is only used for the purpose of verifying the requestor's identity or authority to make the request. We will maintain this information for a reasonable period required for the above-stated purpose and dispose of it after the purpose has been accomplished.

We aim to respond to your verifiable consumer request within 45 days of receiving it. If we need more time to respond, we will notify you in writing of the reason and the extension period. It is important to note that we are only obligated to fulfill two requests per customer per year.