Legal

Widget Data Notice

Last updated: 2026-06-03 CCPA Notice at Collection

This notice describes what personal information the Knobot chat widget collects from visitors and the purposes for which it is used. Knobot acts as a service provider to the business operating this chat (the "Business") within the meaning of Cal. Civ. Code §1798.140(ag).

Categories of personal information collected

  • Content of conversation messages sent to the chat.
  • IP address at time of widget loading (truncated to /24 for IPv4 or /48 for IPv6 in routine access logs).
  • Voluntarily-submitted lead information (name, email, phone, and any other fields the Business has configured the chat to capture).
  • A randomly generated visitor identifier ("visitorId") used to maintain conversation continuity.
  • Global Privacy Control signal (if your browser sends one) — recorded for compliance audit.

Sensitive personal information

Conversation content may incidentally contain sensitive personal information (SPI) as defined in Cal. Civ. Code §1798.140(ae) — for example, references to health, religion, or sexual orientation — depending on what you choose to type. Knobot processes such content only to deliver the requested chat service to the Business and does not combine it with data from other sources.

Purposes of processing

  • Generating chat responses using AI models.
  • Delivering captured lead information to the Business.
  • Detecting and preventing abuse and rate-limit violations.
  • Operating, securing, and improving the chat service for the Business.

Sale or sharing

Knobot does not sell personal information and does not share personal information for cross-context behavioral advertising. We do not run advertising networks or third-party analytics trackers in the widget.

Retention

Conversation messages and lead data are retained for the life of the Business's account with Knobot. On account closure, data is deleted within thirty days after a thirty-day export window. Compliance-event records (including GPC signals, DSAR requests, and chat consent records) are retained for 25 months. See the full Knobot Privacy Policy for details.

Your rights

Depending on your state of residence you may have rights to know, delete, correct, and limit the use of personal information. To exercise a right, email [email protected] from the address associated with your interaction, or send the request to that address and include enough information for us to locate your data (typically the website where you chatted and the approximate date).

Authorized agents

You may designate an authorized agent to submit a privacy request on your behalf. The agent must email [email protected] with: (a) a signed written permission from you, (b) sufficient information for us to verify your identity, and (c) sufficient information for us to verify the agent's authority. We will respond within 45 calendar days from receipt of a verifiable request.

Global Privacy Control

If your browser sends a Global Privacy Control (GPC) signal, the widget will honor it. You will see a "Privacy signal honored" confirmation in the chat footer per California regulation 11 CCR §7025(c)(6).

Contact

Knobot · [email protected]