Privacy Policy

1. Our Commitment to Data Privacy

At Chatshark (“we”, “our”, or “us”), we treat your data privacy and security with the highest standards of confidentiality. We design our AI orchestration architecture around zero-knowledge principles and minimal retention. We do not sell your personal data to data brokers or advertising networks, nor do we use your private session data to train foundational models without your express, opt-in consent.

2. Information We Collect

We collect information strictly necessary to provide reliable model inference, maintain authentication, and bill for platform compute:

• Account Identifiers: Your email address, display name, profile avatar, and authentication provider identifiers (e.g., Google or GitHub OAuth).
• Prompt & Conversational Inputs: Text prompts, uploaded documents (PDFs, CSVs, code files), multimodal images, and parameters you submit to our AI interface.
• Payment & Billing Data: Payment card numbers, billing addresses, and tax identifiers processed directly through PCI-DSS Level 1 certified processors (Stripe). We never store full credit card details on our own servers.
• Technical Telemetry: Anonymized latency metrics, error crash logs, client version headers, and browser user-agent tokens required to maintain reliability and prevent DDoS attacks.

3. How We Process Your Data & Model Providers

Chatshark connects you to leading foundation model providers (such as OpenAI, Anthropic, Google DeepMind, and specialized open-weights hosts). When you initiate a query:

• Your prompt payload and attachments are routed through secure, encrypted TLS 1.3 connections directly to the selected provider’s enterprise API endpoint.
• Our commercial provider agreements include explicit zero-data-retention (ZDR) and business associate commitments ensuring inputs are not used to train public foundation weights.
• Conversations remain confidential between you and the authenticated workspace.

4. Security & Encryption Architecture

We implement defence-in-depth protocols adhering to SOC2 Type II standards:

• Encryption in Transit: All HTTP traffic is protected using TLS 1.3 with modern cipher suites.
• Encryption at Rest: Database records, stored chat transcripts, and file caches are encrypted using AES-256 GCM.
• Isolated Workspaces: Sandboxed execution environments isolate temporary code interpreter workloads and data analysis scripts.
• Access Controls: Strict least-privilege role-based access control (RBAC) governs internal infrastructure; employees cannot view customer conversation contents without explicit administrative audit logs.

5. Data Retention & Deletion

You retain full authority over your data lifecycle:

• Chat History Management: You can delete individual messages, entire chat threads, or wipe uploaded documents at any time from your sidebar.
• Account Erasure: When you delete your Chatshark account, all personal identifiers, conversation records, and API tokens are permanently purged from active databases within 30 days.
• Legal Backups: Financial transaction logs are retained strictly as required by statutory accounting and tax compliance laws.

6. Your Privacy Rights (GDPR, CCPA & Global Laws)

Depending on your geographic residency, you possess rights under the EU General Data Protection Regulation (GDPR), UK GDPR, and California Consumer Privacy Act (CCPA/CPRA):

• Right to Access: Request a full copy of the personal data we hold about you in a structured, machine-readable format.
• Right to Rectification: Request correction of inaccurate personal details.
• Right to Erasure (“Right to be Forgotten”): Demand permanent deletion of your profile and history.
• Right to Restrict Processing & Opt-Out: Object to processing of your information or withdraw consent at any time without punitive service restriction.

7. Third-Party Subprocessors

We engage trusted cloud infrastructure vendors (e.g., Supabase, Vercel, AWS, Stripe) who undergo strict security reviews and sign Data Processing Addendums (DPAs) incorporating standard contractual clauses.

8. Cookies & Local Storage

Chatshark uses essential local cookies and browser local storage strictly required for user authentication, maintaining your session state, and preserving UI preferences (such as light/dark mode and model selections). We do not deploy intrusive third-party cross-site advertising tracking cookies.