The short version. We collect what we need to run your account and nothing more.
We don't sell your data, we don't share it with advertisers, and we set no tracking cookies. If you're a visitor who used a chat widget on someone's website, that business — not us — is responsible for your data.
Siyazen provides a document-grounded AI chat assistant that businesses embed on their own websites. That puts us in two different positions, and your rights depend on which one applies to you.
| Our role | Whose data | Who decides why it's collected |
|---|---|---|
| Data Fiduciary | Our account holders — the businesses who sign up here | Us. This policy governs that data directly. |
| Data Processor | Website visitors who chat with, or leave details in, a customer's embedded widget | Our customer, not us. We act on their instructions. |
If you're a visitor who used a chat widget, the business whose website you were on is your Data Fiduciary. Their privacy policy governs, and requests about your data should go to them first. We'll help them answer you.
When you register, we collect:
As you use the service we also hold the documents you upload, your chat history, your wallet balance and subscription status, and usage totals for billing. We record which version of this policy and of our terms you accepted, and when.
Two, both strictly necessary: access_token (your signed session, HTTP-only) and
csrf_token (protects against cross-site request forgery). Both are cleared when you
close your browser. We set no advertising or analytics cookies.
When someone uses a customer's embedded widget, we process:
Where the customer has switched it on, a visitor must give explicit consent before their details are saved. The exact wording they agreed to is stored with their details, and is never rewritten if the customer later changes that wording.
We don't store visitor IP addresses, device fingerprints or advertising identifiers, and we don't track visitors across sites.
We use a small number of providers, each for one job:
| Provider | What for |
|---|---|
| Amazon Web Services | Hosting, document storage, text extraction, and the AI that generates replies |
| Managed database provider | Running the database that holds your account, conversations and leads |
| Cashfree Payments | Processing subscription and wallet payments |
| Our email provider | Sending lead notifications and service email |
We don't sell your data and we don't share it with advertisers or data brokers. Card details are handled by Cashfree and never reach our servers.
Uploaded documents, extracted text, and the embeddings used to search them are stored in India, in AWS's Mumbai region. Your account details, conversations and captured leads sit in a database run for us by a managed hosting provider.
One exception worth stating plainly: assistant replies are generated through a cross-region inference profile, which means the text of a question and the excerpts it matched may be processed outside India. That processing is transient — nothing is retained by the model — but we'd rather say so than imply everything stays in one country.
Passwords are stored only as one-way hashes. Sessions use signed, HTTP-only cookies with cross-site request forgery protection. Every account's documents, conversations and leads are isolated by account and are never readable across accounts.
We keep your account data for as long as your account exists. Documents and individual conversations can be deleted by you at any time from your dashboard, and deletion is immediate and permanent.
Chat transcripts and the questions visitors ask are deleted automatically. They stay readable in the dashboard for 60 days. After that they are cleared from the product in a monthly sweep and held only in secure archival storage, and at 90 days from the date of the conversation they are destroyed permanently — the archived copy included. Nothing recovers them after that point, ourselves included.
| What | How long we keep it | What happens then |
|---|---|---|
| Chat messages and assistant replies | 60 days visible, 90 days maximum | Destroyed permanently, automatically |
| Questions the assistant could not answer | 60 days visible, 90 days maximum | Destroyed permanently, automatically |
| Contact details left through a lead form | Until deleted | Kept until the business deletes them, or you ask us |
| Documents uploaded by an account holder | Until deleted | Deleted by the account holder, immediately and permanently |
| Billing, payment and usage records | As long as the law requires | Retained for tax and accounting obligations |
| Account details | Life of the account | Deleted when the account is closed |
Contact details left through a lead form are deliberately not on a timer. They are the record of someone asking a business to get in touch, and how long that is kept is the account holder's decision rather than ours — they can delete any lead at any time, and you can ask them to.
Deleting a conversation does not delete the billing record of it. We keep the date, the account it belonged to and what it cost, because we are required to account for what we charged — but the messages themselves are gone.
If you want data erased sooner than the schedule above, email us at info@siyazen.com and we'll action it within 30 days.
Under the Digital Personal Data Protection Act 2023 you can:
Some of this you can do yourself: your profile details are editable in the dashboard, and documents and conversations can be deleted there. For anything else — including erasing your whole account — email info@siyazen.com and we'll respond within 30 days.
If you're a website visitor rather than an account holder, send your request to the business whose site you were using. They decide what happens to that data; we'll help them carry it out.
If something about how we handle your data isn't right, write to our Grievance Officer at info@siyazen.com.
We'll acknowledge you within 30 days. If you're not satisfied with the outcome, you may complain to the Data Protection Board of India.
Each version is published at a permanent, dated address and is never edited after publication. Your account records which version you accepted, so what you agreed to can always be established exactly. We'll tell you before any material change takes effect.
Siyazen
6-125-6, Vasanth Nagar, Ootuvalmadam
Nagercoil - 629002, Kanyakumari
Tamil Nadu, India
info@siyazen.com