Introduction
Benny Chat ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI chat application and related services.
Information We Collect
Personal Information
We collect information that you provide to us:
- Account Information: Email address, name, and profile picture when you create an account
- Authentication Data: Discord ID, Google ID, or credentials when you authenticate via OAuth providers
- Billing Information: Payment details processed through Stripe for subscription management
- Communication Preferences: Email address for transactional emails and service updates
Usage Data
We automatically collect certain information when you use our services:
- Chat Data: Messages, conversation history, folders, and chat settings
- AI Interactions: Prompts, responses, tool usage, and custom system prompts you configure
- File Uploads: Documents and attachments you share in conversations
- User Preferences: Settings, feature toggles, and customization options
- Analytics Data: Page views, feature usage, session information, and interaction patterns via PostHog
Third-Party Integration Data
If you enable optional third-party integrations through Smithery MCP:
- Todoist: Task lists and project information
- GitHub: Repository access for private Obsidian vaults
- Limitless AI: Personal lifelog data from your Limitless devices
- Perplexity: Search queries and results
How We Use Your Information
We use the collected information to:
- Provide, operate, and maintain our AI chat services
- Process your subscription payments and manage billing through Stripe
- Authenticate your account and verify Discord server membership
- Send transactional emails including magic links, subscription confirmations, and service notifications
- Personalize your experience with custom system prompts and AI interactions
- Improve our services through analytics and usage pattern analysis
- Provide customer support and respond to your inquiries
- Detect, prevent, and address technical issues or security threats
- Facilitate optional integrations with third-party services you enable
Third-Party Services
We use the following third-party service providers:
- Stripe: Payment processing and subscription management
- Discord: OAuth authentication and community access verification
- Google: OAuth authentication
- PostHog: Product analytics and feature flags
- Resend: Transactional email delivery
- Vercel: Application hosting and deployment
- Neon/PostgreSQL: Database hosting and storage
- Smithery: MCP server management for optional third-party integrations
- Anthropic/OpenAI: AI model providers for chat functionality
Each third-party service has its own privacy policy governing how they handle your data. We encourage you to review their policies.
Data Storage and Security
We implement appropriate technical and organizational security measures to protect your personal information:
- Data is encrypted in transit using HTTPS/TLS
- Database credentials and API keys are stored securely as environment variables
- Authentication tokens use industry-standard hashing
- Access to user data is restricted to authorized personnel only
- Payment information is processed and stored by Stripe in PCI DSS-compliant infrastructure
While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to:
- Comply with our legal obligations
- Resolve disputes
- Enforce our agreements
- Maintain business records
You may request deletion of your account and associated data at any time through your account settings or by contacting us.
Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Data Portability: Request a copy of your data in a structured, machine-readable format
- Opt-Out: Opt out of certain data collection practices, including analytics
- Withdraw Consent: Withdraw consent for processing where consent is the legal basis
To exercise these rights, please contact us using the information provided below.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
- Maintain your authentication session
- Remember your preferences and settings
- Analyze usage patterns and improve our services
- Track conversion events and user interactions
You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our services.
Children's Privacy
Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.
International Data Transfers
Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our services, you consent to the transfer of your information to our facilities and the third parties with whom we share it as described in this policy.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Significant changes will be communicated via email or a prominent notice in our application.
You are advised to review this Privacy Policy periodically for any changes. Your continued use of our services after any modifications constitutes acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Email: ben@hint.services