Privacy Policy

Last updated: 17 June 2026

This policy explains how Khabir collects, uses, shares, and protects your personal data when you use our website, dashboard, and chat widget — and what your rights are.

1. Data we collect

We collect the following types of data:

• Account data: your name, email, password (hashed), and business name when you sign up.
• Knowledge base content: the files and text you upload (PDF, Word, text) to train your assistant. You are responsible for the lawfulness of this content and any personal data it contains.
• Conversation data: messages exchanged between your website visitors and the widget, and any contact details they voluntarily provide (e.g. email or phone on human handoff).
• Usage and technical data: number of conversations, access times, browser and device type, IP address, and error logs — to run and protect the service.
• Payment data: processed by a third-party payment provider. We do not store full card details on our servers.

2. How we use your data

We process your data for the following purposes, on the legal bases shown:

• Providing the service (performance of contract): creating your account, running the assistant, and answering your visitors from your knowledge.
• Billing and subscription management (performance of contract).
• Improvement, support, and security (legitimate interests): measuring performance, preventing fraud and abuse, and providing support.
• Communicating with you about your service and account (performance of contract), and marketing messages (consent — you can opt out anytime).
• Complying with legal obligations (legal obligation).

3. Processing by AI providers

To generate answers, Khabir sends excerpts of your knowledge base and the visitor's question text to third-party AI model providers (such as OpenAI and Anthropic) for processing and returning a response. These providers process this content on our behalf under data processing agreements and, per their business API terms, do not use it to train their models. Avoid uploading unnecessary sensitive data to your knowledge base.

4. Who we share data with

We do not sell your personal data. We share it only with service providers (“subprocessors”) who help us operate the service, and only to the extent necessary:

• AI model providers — to generate answers.
• Payment provider — to process subscriptions.
• Hosting and infrastructure provider — to store data and run servers.
• Email services — to send system messages and notifications.

We may also disclose data where required by law, to protect our rights and those of our users, or as part of a merger or acquisition.

5. Cookies and local storage

We use cookies and local storage for essential purposes only: keeping your session logged in and remembering your language and theme preferences. We do not use third-party advertising trackers on the dashboard. You can control cookies through your browser settings, though disabling them may affect how the service works.

6. Data retention

We keep your account data for as long as your account is active. Your knowledge base files remain until you delete them, and deleting them also removes the knowledge derived from them. You can control conversation log retention from the dashboard. When you close your account, we delete or anonymize your data within a reasonable period, unless the law requires us to retain some of it.

7. International data transfers

Your data may be processed or stored in countries outside your own, where some of our service providers are located. When transferring data subject to the EU GDPR outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

8. Your rights

Under applicable data protection laws (including the GDPR), you have the right to: access your data, rectify it, erase it, restrict or object to its processing, port your data, and withdraw consent at any time. To exercise any of these rights, email us at info@khabir.live. You also have the right to lodge a complaint with your competent data protection authority.

If you are a visitor to a site that uses Khabir and wish to exercise your rights regarding your conversations, the controller is the owner of that site; please contact them directly.

9. Data security

We apply appropriate technical and organizational measures to protect your data, including encryption in transit, password hashing, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children's privacy

The service is intended for businesses and is not directed at anyone under 16. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a revised “Last updated” date, and for material changes we will make reasonable efforts to notify you.

12. Contact us

For any privacy question or request regarding your data, email us at info@khabir.live.