Privacy Policy for QiLinChat

Last Updated: 2026-07-26

QiLinChat ("we," "us," or "our") operates the website qilinchat.com and the QiLinChat no-code chatbot builder (the "Service"). The Service lets you create forms and surveys as conversational chatbots and sync the responses into tools like Notion and Google Sheets. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Account information
When you sign up we collect your email address (used for passwordless sign-in and account communication). We do not store passwords.

1.2 Billing information
Paid plans are processed by our payment provider, Stripe. Stripe handles your card details directly; we do not receive or store full payment card numbers on our servers. We retain limited billing metadata (such as plan, subscription status, and invoices).

1.3 Content you create
We store the chatbots you build, including their questions, logic, styling, and settings.

1.4 Response data collected by your chatbots
When end users interact with a chatbot you publish, the Service stores the answers they submit (for example a name, email, phone number, or other information you choose to collect). This data belongs to you. With respect to this data, you are the "controller" and QiLinChat acts as a "processor" that stores and forwards it on your behalf.

1.5 Integration credentials
To provide sync and notification features, we securely store the credentials you connect: OAuth tokens for Notion and Google Sheets, webhook URLs for Slack and Discord, and — for AI-powered chatbots — the OpenAI API key you provide. These are used only to operate the features you enable.

1.6 Usage and cookies
We use essential cookies to keep you signed in and to operate the Service. We may collect basic technical and usage information (such as IP address, browser type, and pages used) to keep the Service secure and to improve it. We do not use third-party advertising cookies.

2. How We Use Information

We use the information above to:
- provide, operate, and maintain the Service;
- deliver the sync and notification features you enable (e.g. sending responses to your Notion database or Google Sheet, and notifying you via Slack, email, or Discord);
- generate analytics about your own chatbots for you;
- process payments and manage subscriptions;
- send transactional emails (such as sign-in links and account or notification emails);
- provide support and respond to your requests; and
- protect the Service against fraud, abuse, and security issues.

3. Third-Party Services

We rely on trusted third parties to run the Service, and we share information with them only as needed to provide it:
- Supabase — authentication and database hosting;
- Vercel — application hosting;
- Stripe — payment processing;
- Amazon Web Services (SES) — sending transactional email;
- OpenAI — generating responses for AI-powered chatbots, using the API key you provide;
- Notion, Google Sheets, Slack, and Discord — destinations you choose to connect for syncing responses and receiving notifications.

We do not sell, rent, or trade your personal information.

4. Data You Collect From Others

You are responsible for the data your chatbots collect from your end users. You must have a lawful basis and provide any notice or obtain any consent required by applicable law before collecting personal information through the Service.

5. Data Retention

We keep your information for as long as your account is active or as needed to provide the Service. You can delete chatbots and their responses at any time. When you delete your account, we remove your associated data, except where we must retain certain records for legal, tax, or security reasons.

6. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and database-level access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Children's Privacy

The Service is not intended for children under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

8. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information. You can exercise these rights, or ask any privacy question, using the feedback button in your QiLinChat dashboard.

9. International Users

We and our providers may process and store information in the United States, the European Union, or other countries. By using the Service you consent to this processing.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last Updated" date, and we may notify you by email of material changes.

11. Contact

If you have any questions or requests about this Privacy Policy, please contact us using the feedback button in your QiLinChat dashboard, or visit qilinchat.com.