Privacy Policy
Effective 1 September 2026
The short version. We collect what we need to run your account and nothing more.
We don’t sell your data, we don’t share it with advertisers, and we set no tracking cookies. If you’re a visitor who used a chat widget on someone’s website, that business — not us — is responsible for your data.
1. Who we are, and our two roles
Siyazen provides a document-grounded AI chat assistant that businesses embed on their own websites. That puts us in two different positions, and your rights depend on which one applies to you.
| Our role | Whose data | Who decides why it’s collected |
|---|---|---|
| Data Fiduciary | Our account holders — the businesses who sign up here | Us. This policy governs that data directly. |
| Data Processor | Website visitors who chat with, or leave details in, a customer’s embedded widget | Our customer, not us. We act on their instructions. |
If you’re a visitor who used a chat widget, the business whose website you were on is your Data Fiduciary. Their privacy policy governs, and requests about your data should go to them first. We’ll help them answer you.
2. What we collect about account holders
When you register, we collect:
- Username — identifies your account at login
- Name — to address you in the product and in email
- Email address — login identity, notifications, and service correspondence
- Contact number — account contact
- Account type, plus company name and website for company accounts
- Password — stored only as a one-way hash, never in readable form
As you use the service we also hold the documents you upload, your chat history, your wallet balance and subscription status, and usage totals for billing. We record which version of this policy and of our terms you accepted, and when.
3. Cookies
Two, both strictly necessary: access_token (your signed session, HTTP-only) and csrf_token (protects against cross-site request forgery). Both are cleared when you close your browser. We set no advertising or analytics cookies.
4. What we process for website visitors
When someone uses a customer’s embedded widget, we process:
- Chat messages they type, and the assistant’s replies
- Contact details submitted through a lead form — name, email, phone, message, and any additional fields that customer has chosen to ask for
- A session identifier in the visitor’s browser, so a conversation survives a page reload
Where the customer has switched it on, a visitor must give explicit consent before their details are saved. The exact wording they agreed to is stored with their details, and is never rewritten if the customer later changes that wording.
We don’t store visitor IP addresses, device fingerprints or advertising identifiers, and we don’t track visitors across sites.
5. Who else handles your data
We use a small number of providers, each for one job:
| Provider | What for |
|---|---|
| Amazon Web Services | Hosting, document storage, text extraction, and the AI that generates replies |
| Managed database provider | Running the database that holds your account, conversations and leads |
| Cashfree Payments | Processing subscription and wallet payments |
| Our email provider | Sending lead notifications and service email |
We don’t sell your data and we don’t share it with advertisers or data brokers. Card details are handled by Cashfree and never reach our servers.
6. Where your data is stored
Uploaded documents, extracted text, and the embeddings used to search them are stored in India, in AWS’s Mumbai region. Your account details, conversations and captured leads sit in a database run for us by a managed hosting provider.
One exception worth stating plainly: assistant replies are generated through a cross-region inference profile, which means the text of a question and the excerpts it matched may be processed outside India. That processing is transient — nothing is retained by the model — but we’d rather say so than imply everything stays in one country.
Passwords are stored only as one-way hashes. Sessions use signed, HTTP-only cookies with cross-site request forgery protection. Every account’s documents, conversations and leads are isolated by account and are never readable across accounts.
7. How long we keep it
We keep your account data for as long as your account exists. Documents and individual conversations can be deleted by you at any time from your dashboard, and deletion is immediate and permanent.
We don’t currently run automatic time-based deletion of chat history or captured leads — they’re kept until you or the account holder removes them, or until you ask us to. If you want data erased, email us at info@siyazen.com and we’ll action it within 30 days.
8. Your rights
Under the Digital Personal Data Protection Act 2023 you can:
- ask what personal data of yours we hold, and why
- have it corrected or completed
- have it erased
- nominate someone to exercise these rights for you
- raise a grievance, and have it answered
Some of this you can do yourself: your profile details are editable in the dashboard, and documents and conversations can be deleted there. For anything else — including erasing your whole account — email info@siyazen.com and we’ll respond within 30 days.
If you’re a website visitor rather than an account holder, send your request to the business whose site you were using. They decide what happens to that data; we’ll help them carry it out.
9. Grievance officer
If something about how we handle your data isn’t right, write to our Grievance Officer at info@siyazen.com.
We’ll acknowledge you within 30 days. If you’re not satisfied with the outcome, you may complain to the Data Protection Board of India.
10. Changes to this policy
Each version is published at a permanent, dated address and is never edited after publication. Your account records which version you accepted, so what you agreed to can always be established exactly. We’ll tell you before any material change takes effect.
11. Contact
Siyazen 6-125-6, Vasanth Nagar, Ootuvalmadam Nagercoil - 629002, Kanyakumari Tamil Nadu, India info@siyazen.com