Privacy Policy

This privacy policy explains how GPT Chatbot di Federico De Cillia collects, uses, and discloses information when you use our website and services.

Contact: info@gptchatbot.it — via Ernesto Teodoro Moneta 50, Milano (MI), 20161, Italy

1. Personal Information We Collect

We gather the following categories of data:

• Identifiers: Real name, username, IP address, email address, account password
• Internet Activity: Website interactions, application usage, advertisement engagement
• Professional Information: Current occupation
• Inferences: Behavioral profiles and attitudes derived from usage patterns
• User Content: Profiles, avatars, and text information you provide
• Device Data: Unique device identifiers, country of access
• Software Details: Operating system and version
• Browser Information: Browser type, timezone, timestamps, pages visited
• Tracking Technology: Cookies, web beacons, Flash cookies, HTML5 local storage
• Publicly Available Information: Data from LinkedIn, Google Scholar, and other public sources

2. How We Collect Information

Data is collected through:

• Direct provision by you (account creation, profile management)
• Automatic collection during your use of the Services
• Google sign-in integration
• Customer support interactions
• Third-party sources

3. How We Use Your Information

We use your personal information when:

• You provide explicit consent
• Processing is necessary for the performance of a contract
• Legitimate business interests exist, including fraud prevention and security
• Legal and regulatory compliance requires it

Specific use contexts include:

• Account registration and management
• Customer service and dispute resolution
• Service improvement and optimisation

4. Data Sharing

You may share information through social sharing features integrated into our services or through third-party platforms you connect to the service. We do not sell your personal information to third parties.

5. Data Storage Location

Personal information is primarily stored on servers in Oregon, United States. By using the Services, you acknowledge that your data may be transferred to, stored in, and processed in the U.S. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection law.

6. Data Retention

We retain data:

• While your account remains active
• For as long as necessary to address your inquiries or comply with legal requirements
• No longer than necessary for the purposes stated in this policy

7. Security Measures

We implement the following security practices:

• Restricted access to personal information
• Pursuit of SOC II and ISO 27001 certification
• Encryption technology for data in transit and at rest
• Security training for employees
• Incident response procedures
• Alignment with Center for Internet Security controls

8. Your Rights

You may request to:

• Know: Understand our data collection practices and the categories of data we hold
• Access: Obtain a copy of your personal information in a portable format
• Correct: Fix inaccurate information we hold about you
• Delete: Have your personal information removed (subject to legal exceptions)
• Restrict: Limit how we process your data in certain circumstances
• Withdraw Consent: Revoke any permission authorisations you have granted
• Cancel Account: Terminate your service relationship with us

To exercise your rights, email us at info@gptchatbot.it from your registered account email address. We will respond within 45 days. You may request access or data portability up to twice per 12-month period.

9. Imported Data and AI Processing

Data you share through uploads or integrations may be submitted to large language model (LLM) partners in anonymised chunks for the purpose of generating responses. Specifically:

• We partner with OpenAI for LLM capabilities
• We do not use customer data for LLM training
• We use retrieval-augmented generation (RAG) technology
• OpenAI's enterprise privacy policy confirms that API data is not used for model training

10. User Controls and Preferences

You can:

• Restrict further use of your personal information
• Opt out of promotional communications by clicking "unsubscribe" in any email
• Manage cookie settings through your browser
• Control push notification preferences

We will not deny services, charge different rates, or reduce service quality based on your exercise of privacy rights.

11. Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to improve your experience, analyse usage, and deliver relevant content. You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our Services.

We do not currently respond to Do Not Track (DNT) browser signals, but we provide the cookie controls described above.

12. Children's Privacy

Our Services are intended for users aged 18 and older. Users aged 13–17 may use the Services only with verifiable parental or legal guardian consent. Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at info@gptchatbot.it.

13. Optional Device Permissions

Certain features may request access to device functions:

• Camera: For video and photo uploads
• Microphone: For voice messages, live video, and audio/video content

These permissions are optional and can be revoked at any time through your device settings.

14. Policy Updates

We may update this Privacy Policy from time to time. We will notify you of material changes at least 30 days before the new policy takes effect, via push notification or a prominent notice on our website. The effective date at the top of this page indicates when the policy was last updated. We encourage you to review this policy periodically.

15. Complaints

If you have concerns about how we process your personal data, you have the right to lodge a complaint with the relevant data protection supervisory authority in your country of residence. In Italy, this is the Garante per la Protezione dei Dati Personali.

Before filing a complaint, we encourage you to contact us directly at info@gptchatbot.it so we can try to resolve your concerns.