Privacy Policy

Last updated: July 11, 2026

1. Introduction

BAP Software Limited ("we," "us," or "our") operates the Chat Tree AI platform and services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and ensuring transparency about our data practices. This policy complies with the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy laws.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, username, and password when you create an account
• Profile Information: Any additional information you choose to add to your profile
• Chat Content: Messages, prompts, and conversations you have with our AI systems
• Payment Information: Billing details for subscription services (processed securely through third-party payment processors)
• Communications: Messages you send to us through support channels

2.2 Information Automatically Collected

• Usage Data: How you interact with our Service, features used, time spent
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Server logs including access times, pages viewed, and system activity
• Cookies and Tracking: Data collected through cookies and similar technologies

2.3 Information from Third Parties

• Authentication data when you sign in through third-party services
• Payment processing information from our payment partners

3. How We Use Your Information

3.1 Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract: To provide the Service you've requested
• Legitimate Interest: To improve our Service and ensure security
• Consent: For marketing communications and certain data processing activities
• Legal Obligation: To comply with applicable laws and regulations

3.2 Purposes of Use

• Provide, maintain, and improve our AI chat services
• Process payments and manage subscriptions
• Communicate with you about your account and our services
• Provide customer support and respond to inquiries
• Train and improve our AI models (using aggregated, anonymized data)
• Detect, prevent, and address security issues and fraud
• Comply with legal obligations and enforce our terms
• Send marketing communications (with your consent)

4. AI Training and Content Use

Important: We do not use your personal conversations or private data to train our AI models. We may use aggregated, anonymized usage patterns and general interaction data to improve our services, but your specific conversations remain private.

You retain ownership of the content you create. AI-generated responses are provided to you for your use, subject to our Terms of Service.

5. Information Sharing and Disclosure

5.1 We May Share Information With:

• Service Providers: Third parties who provide services on our behalf (hosting, payment processing, customer support)
• Business Partners: When necessary to provide requested services
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Safety and Security: To protect rights, property, or safety of users or others

5.2 We Do NOT:

• Sell your personal information to third parties
• Share your private conversations with unauthorized parties
• Use your data for advertising purposes without consent

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption of data in transit and at rest
• Regular security assessments and monitoring
• Access controls and authentication measures
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

• Account Data: Until you delete your account or request deletion
• Chat History: Until you delete conversations or request deletion
• Payment Data: As required for accounting and legal compliance (typically 7 years)
• Usage Data: Anonymized after 24 months

8. Your Rights and Choices

8.1 GDPR Rights (EU Users)

If you are in the European Union, you have the right to:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Withdraw Consent: Revoke consent for processing based on consent

8.2 CCPA Rights (California Users)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it's used
• Delete personal information we have about you
• Opt-out of the sale of personal information (we don't sell data)
• Non-discrimination for exercising your privacy rights

8.3 All Users

• Update your account information and preferences
• Delete your chat history
• Opt-out of marketing communications
• Request account deletion

9. Cookies and Tracking Technologies

9.1 Types of Cookies We Use:

• Essential Cookies: Required for the Service to function
• Performance Cookies: Help us analyze usage and improve performance
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used for targeted advertising (with consent)

9.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect Service functionality. We also provide cookie preference controls in our Service.

10. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. For EU users, we ensure adequate protection through:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Other appropriate safeguards as required by GDPR

11. Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

For users between 13-18, parental consent may be required depending on local laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending email notifications for material changes (where required)

Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

13. Data Protection Officer and Contact Information

For privacy-related questions, concerns, or to exercise your rights, please contact us:

13.1 EU Representative

For EU-related privacy matters, our representative in Ireland can be contacted at the above address.

13.2 Supervisory Authority

EU users have the right to lodge a complaint with their local data protection authority. You can find contact information for EU data protection authorities here.