Privacy Policy

1. Who we are

The Fulply service is operated by Alexandr Mucha, Company ID (IČO): 24365475, Czech Republic ("we"). For any privacy questions, contact us at [email protected].

This policy distinguishes two groups of people: customers (businesses that created an account with us and run a chatbot) and visitors (people who write into the chat widget on one of our customers' websites).

2. Customer data

If you create an account with us, we process the following data as a controller:

• Email address — for signing in and transactional emails (sign-in links, new-contact notifications).
• Name and profile picture — when signing in with Google, to personalise the interface.
• Content you upload — text from your website, PDF files and custom text your chatbot learns from.
• Service usage data — number of AI replies used, selected plan and subscription status.
• Sign-in technical data — IP address and browser information (user agent) for active sign-in sessions, for account security.
• Marketing consent — if you opt in to marketing communications during registration or checkout, we may email you about new features and occasional offers. Consent is voluntary and can be withdrawn at any time.

We do not store payment details (card numbers etc.) — payments are fully processed by Paddle.com as the merchant of record.

3. Widget visitor data

If you write into a chat widget on our customer's website, we process:

• Conversation content — the messages you type into the chat.
• Technical data — IP address, browser information (user agent) and the domain of the page you use the chat from.
• Contact details — name, email, and phone number, if you voluntarily submit them in the contact form.

For this data, the controller is the operator of the website where you use the chat (our customer) — we process it on their behalf as a processor. You can exercise your rights with the operator of that website.

The exception is the chat widget on our own website (fulply.com) — in this case we are both the website operator and the controller of this data, and we process it directly rather than as a processor on a customer's behalf.

4. How we use the data

We use the data mainly to provide and improve the Fulply service: running chatbots and generating answers, delivering new-contact notifications, managing accounts and subscriptions, and protecting the service against abuse. We do not sell data to third parties. We use it to send marketing communications (news, offers) only if you have given voluntary consent during registration or checkout.

The legal basis for this processing is:

• Performance of a contract — for customer account data, uploaded content, and billing.
• Legitimate interest — for widget visitors' conversation content and technical data (providing the service the visitor themselves requested by writing into the chat), for customers' sign-in technical data, and for protecting the service against abuse.
• Consent — for contact details a visitor voluntarily submits in the contact form, and for marketing communications you voluntarily opt into.

5. Processors and third parties

• Hetzner Online GmbH — application hosting and data storage in EU data centers.
• OpenAI — generating chatbot answers: conversation content and relevant parts of the knowledge base are sent to the OpenAI API. Under the OpenAI API terms, this data is not used to train models.
• Paddle — payment processing and invoicing (merchant of record).
• Cloudflare Turnstile — protecting sign-in and the widget against bots.
• Google OAuth — optional sign-in method.
• Email service provider — delivering transactional emails.

6. Retention

• Visitor conversations and contacts — automatically deleted 90 days after the conversation was created.
• Customer account and uploaded content — for the lifetime of the account. After account deletion there is a 30-day recovery window, after which all data is permanently removed.

7. Your rights

Under the GDPR you have the right to access your personal data, to have it rectified or erased, to restrict processing, to data portability and to object. To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz) or your local supervisory authority.

8. Security

Data is transmitted encrypted (HTTPS) and access to it is restricted to the necessary minimum. Any security incidents are handled in accordance with the GDPR.

9. Website analytics

We measure traffic on our own website (fulply.com) using a self-hosted instance of the open-source tool Umami, running on our servers in the EU. The measurement uses no cookies, does not store IP addresses and shares no data with any third party — only anonymous aggregate statistics are stored (pages viewed, browser type, country). The legal basis is our legitimate interest in measuring website traffic.

10. Cookies

We use only strictly necessary cookies — for your sign-in session and for remembering your language and appearance preferences. We use no tracking or advertising cookies.

11. Changes and contact

We may update this policy; we will inform customers of material changes. The policy is drawn up in Czech and English; in the event of a discrepancy, the Czech version prevails. Direct any questions to [email protected].