Effective: March 10, 2026
At EchoEase, we take your privacy seriously. This Privacy Policy describes how we collect, use, store, and share information when you use the EchoEase platform, including our website, dashboard, APIs, and embeddable chat widget (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.
When you create an account, we collect your first name, last name, and email address. During onboarding, we may also collect your company name and website URL.
To train your AI assistant, you may upload files, URLs, manual text entries, and Q&A pairs to your knowledge base. We store this content to provide the Service.
When end users interact with your AI assistant through the chat widget, we collect:
We do not store end user IP addresses beyond what is necessary for geographic inference. End user IP addresses are not associated with individual identities.
We collect information about how you use the Service, including feature usage, page views, and interactions within the dashboard. This helps us improve the Service.
Payment processing is handled by Stripe. We do not store credit card numbers, bank account details, or other sensitive payment information on our servers. We receive and store transaction identifiers, subscription status, and billing history from Stripe.
We use the information we collect to:
We do not use your data for advertising purposes. We do not sell your data to third parties.
To power your AI assistant, your knowledge base content and end user queries are processed by third-party AI providers. Specifically:
Data isolation: Your data is never combined with other customers' data for training, fine-tuning, or any purpose other than providing the Service to you. Each customer's knowledge base is completely separate.
We share your information only with the following categories of service providers, and only to the extent necessary to provide the Service:
We may also disclose your information if required to do so by law, or if we believe in good faith that disclosure is necessary to comply with legal obligations, protect our rights, or ensure the safety of our users or the public.
We use minimal cookies and tracking technologies:
We do not use third-party advertising trackers, social media tracking pixels, or behavioral analytics cookies.
Depending on your location, you may have the following rights regarding your personal data:
For users in the European Economic Area (EEA), these rights are provided under the General Data Protection Regulation (GDPR). To exercise any of these rights, please contact us at privacy@echoease.ai.
Your data may be processed in multiple regions, including the European Union and the United States, depending on the infrastructure used by our service providers (Supabase, Vercel, AI providers). Where data is transferred outside of the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent legal mechanisms.
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly.
We implement appropriate technical and organizational measures to protect your data, including:
While we take security seriously, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or through a notice in the dashboard. The "Effective" date at the top of this page indicates when the policy was last updated. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: