GDPR Policy

Last updated: 30 October 2026

This policy is a draft starting point and has not been reviewed by a lawyer — if you are relying on it for compliance, please have it reviewed before publishing.

1. Who This Applies To

The EU General Data Protection Regulation (GDPR) applies to the personal data of individuals located in the European Union/EEA, regardless of where the organisation processing that data is based. This policy explains how Livo ChatBot handles personal data when GDPR applies — for example, when one of our customers' website visitors is located in the EU, or when an EU-based individual holds a Livo ChatBot account.

As with our general Privacy Policy, two roles matter here and they are not the same: for a customer's own account data, Livo ChatBot (operated by Loginfotech) is the data controller. For the personal data of a customer's website visitors collected through their chatbot, our customer is the data controller and Livo ChatBot acts as a data processor on their instructions.

2. Lawful Basis for Processing

• Contract — processing your account, billing and subscription data is necessary to provide the service you've signed up for.
• Legitimate interests — securing our platform, preventing abuse, and improving the product.
• Consent — where a website visitor voluntarily submits their name, email or phone number through a pre-chat form or in conversation, that submission is the basis for collecting it. Our customers are responsible for making sure their own use of the chatbot (e.g. any additional tracking they add) has a proper lawful basis.
• Legal obligation — retaining billing records (invoices, GST details) as required by applicable tax law.

3. What We Collect

The categories of personal data are the same ones listed in our Privacy Policy — account details, chatbot configuration, billing records for customers; and name, email, phone, chat transcript, IP-derived approximate location and device information for website visitors who interact with a deployed chatbot.

4. Your Rights Under GDPR

If GDPR applies to you, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your personal data ("right to be forgotten"). For visitor data specifically, our Visitor Data Privacy tool lets the chatbot owner look up and permanently delete every chat session, message and lead tied to one visitor's email address — available on every plan, at no extra cost.
• Restriction — ask us to limit how we use your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at support@livochatbot.com. If your request concerns a website visitor's data rather than your own account, we may need to direct you to the specific website owner (the data controller for that data) first, since they are best placed to action it — though we will always assist.

5. International Data Transfers

Livo ChatBot's infrastructure is hosted in India. If you are located in the EU/EEA, this means your data may be transferred outside the EU/EEA. [Company to confirm the specific safeguard relied on for this transfer — e.g. Standard Contractual Clauses — before relying on this page.]

6. Data Retention

We retain personal data only as long as necessary for the purposes described above, or as required by law (e.g. billing records for tax purposes). Website visitor data is retained according to the policy of the specific website owner (our customer), who can request permanent deletion of a visitor's data at any time via the Visitor Data Privacy tool.

7. Security

We use industry-standard safeguards — encrypted connections (HTTPS), hashed passwords, two-factor authentication for accounts, and role-based access controls — to protect personal data. No system can guarantee absolute security, and we encourage reporting any suspected vulnerability to info@livochatbot.com.

8. Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local data protection supervisory authority, in addition to contacting us directly.

9. Contact

Loginfotech
Email: support@livochatbot.com