Privacy, terms and imprint

Controller

The controller for data processing on ChatScope is Simon Grimm, Achstraße 47, 6844 Altach, Austria, hello@simongrimm.at. Contact this address for any privacy question or to exercise your rights.

In short

The chat statistics and the free preview of the interest analysis run entirely in your browser. Your chat does not leave your device.

Only if you buy the paid AI report and explicitly agree is a selection of messages, without names, phone numbers, e-mail addresses and links, sent to our server and to OpenAI (USA), analyzed and not stored.

You may only upload chats you are part of yourself, and only if everyone in the chat agrees. You confirm this before uploading and again before buying.

Chat statistics and preview in your browser

The file you choose is read and analyzed by your browser on your device. It is not uploaded to us. We do not see who is in the chat or what was written.

For the interest analysis the chat is kept in your browser storage (IndexedDB) for up to three days so it survives the payment step. The finished report is also stored only in your browser. You can remove both at any time with “Delete chat from this device” or in your browser settings. After three days both are discarded automatically on your next visit.

Other people’s data and consent of everyone in the chat

A chat always contains messages from other people, who are affected by the analysis. You may therefore only use ChatScope for chats you take part in, and only if everyone in the chat agrees that the chat is analyzed and sent to OpenAI for the AI report. Without that agreement, use is not permitted.

Chats may contain sensitive data, such as health, sexuality, religion or political views. Only upload such chats if the people concerned have explicitly agreed, or remove those parts from the file first.

You must be at least 16 years old.

AI report: transfer to OpenAI

If you buy the AI report, your browser sends a selection of messages, the computed metrics and your optional details about the situation to our server. Before sending, your browser replaces names with placeholders and removes e-mail addresses, phone numbers, links, IBANs and addresses. Our server forwards the data to OpenAI and returns the report to your browser.

The processor is OpenAI (for customers in the EEA OpenAI Ireland Ltd., processing by OpenAI, L.L.C. in the USA), under a data processing agreement and the EU standard contractual clauses. OpenAI does not use data sent through the API for training. We request responses without storage; OpenAI keeps inputs and outputs for at most 30 days to detect abuse and then deletes them. More: OpenAI – Your data, OpenAI privacy policy.

Our server does not store the chat, writes no chat content or free text to logs and never puts any of it into URLs.

Payment

Payments are processed by Stripe Payments Europe Ltd., Ireland, through the Stripe account our service FollowScope also uses; your statement may therefore show FollowScope or ChatScope. Stripe processes your payment details itself; we never see full card data (Stripe privacy).

With the payment we store at Stripe only: language, selected mode, number of analyses used, number of processed tokens and a fingerprint (hash) of the sent excerpt. The fingerprint makes sure the included re-analysis applies only to the same chat; the content cannot be reconstructed from it. Invoice and payment records are kept for seven years as required by law.

Hosting and security

The site is hosted by Vercel Inc., USA (servers in the EU and USA, EU standard contractual clauses, Vercel privacy). Each visit involves technical data such as IP address, time and browser type. We use the IP address briefly to limit abuse (for example only a few analyses in a short time) and do not store it permanently.

We use no analytics or advertising services and set no tracking cookies. Only on Stripe’s checkout page does Stripe set its own cookies needed for the payment.

Legal bases

AI report: performance of the contract (Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a), for special categories Art. 9(2)(a) GDPR). For the data of the other people in the chat you rely on their consent, which you obtain beforehand. Payment and retention: Art. 6(1)(b) and (c) GDPR. Hosting and security: legitimate interest in a secure, working service (Art. 6(1)(f) GDPR).

You can withdraw your consent at any time for the future. Since we do not store the chat, it is enough not to request another report and to delete the chat in your browser.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Write to hello@simongrimm.at. Because we store no chat content, for chats we can usually only confirm that no data exists.

You can lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna (dsb.gv.at).