Privacy Policy

This policy explains what Kelma stores, why, and what happens to conversations between your chat agent and your website’s visitors. The short version: we store what’s needed to run the service, we don’t sell data, and your agents’ knowledge and conversations belong to you.

What we store about you

• Account: your email address, plan, and billing status. Sign-in is by magic link, so we never store a password.
• Knowledge content: the pages, documents, links, and text you feed your agents, processed and stored so your agents can answer from them.
• Billing: payments are processed by Stripe; we store your Stripe customer reference, never card numbers.

Your visitors’ conversations

• When someone chats with your agent, we store the conversation (messages, a random visitor identifier, the page it happened on) so you can read it in your inbox, and any lead details the visitor chooses to submit.
• You are the owner of this data, and responsible for informing your visitors about your use of a chat assistant where required. Deleting a conversation or an agent deletes its data permanently.
• Messages are processed by AI infrastructure providers to generate answers; they are used to answer the question at hand, not to build advertising profiles.
• The embedded widget sets no cookies on your website. It keeps a random identifier in the browser’s local storage so returning visitors keep their conversation thread.

Cookies & analytics on this site

kelma.chat itself uses one essential session cookie to keep you signed in. Analytics run only if you accept the cookie banner — declining loads no analytics scripts at all.

Service providers

Kelma runs on vetted infrastructure providers: hosting and databases (Vercel, Neon), email delivery (Resend), payments (Stripe), and AI language-model providers used solely to generate your agents’ replies. Each receives only what it needs to do its job.

Retention & deletion

Data is kept while your account is active. Delete an agent, a source, or a conversation and it’s removed immediately. To delete your whole account and everything in it, email us and it’s done within 30 days.

Your rights

You can request a copy, correction, or deletion of your personal data at any time under the GDPR. Email kelma@limitbreakit.com and we’ll sort it out. If you’re unsatisfied, you may complain to the Office of the Information and Data Protection Commissioner (Malta).

Changes

Material changes to this policy are announced by email or in the dashboard before they take effect.