Privacy Policy

This policy explains how SpoQAI ("SpoQ", "we", "us") collects, uses, and protects personal data when you visit spoqai.com, contact us, or use the SpoQ conversational AI platform.

1. Who we are
SpoQ is operated by SpoQAI, C-2, Sector 2, Noida, Uttar Pradesh, India. For any data protection questions, contact us at paddy@spoqai.com.

2. Two roles we play
How we handle data depends on whose data it is. We act as a data controller for people who visit our website, contact us, or book a demo — in those cases we decide how the data is used.

We act as a data processor for the end customers of brands that use SpoQ. When a shopper talks to SpoQ on a brand's WhatsApp, Instagram, or website, that brand is the controller and we process the data on their instructions, under a Data Processing Agreement.

3. What we collect
When you visit our website or contact us, we collect your name, email address, company or brand name, and anything else you enter in a contact or demo form. We also collect technical data including your IP address, browser type, device type, pages viewed, and referring site, along with cookie and analytics data.

When our clients use SpoQ, we collect account details for client users — name, email, role, and login credentials — along with configuration data such as product catalogues, brand voice settings, and escalation rules.

When a shopper talks to SpoQ, we process the conversation content across website chat, WhatsApp, and Instagram, along with the identifiers used to recognise a returning customer — email address, phone number, and platform-specific IDs. We also access data from the brand's connected tools, including order history, delivery status, and subscription or return status, as needed to answer the shopper's question.

4. Why we process it, and our lawful basis
We process data to provide the service and to recognise returning customers across channels, both on the basis of performance of a contract, and in the latter case on the instructions of the brand acting as controller.

We respond to enquiries and demo requests on the basis of our legitimate interests, or consent where required. We process data to improve reliability and fix problems on the basis of legitimate interests, send marketing communications on the basis of consent that can be withdrawn at any time, and retain certain records to meet legal and accounting obligations.

We do not use client conversation data to train models used for any other customer.

5. Where data is stored
Where data is stored depends on the client. We host each client's data in the region appropriate to them — for clients in the European Union, data is stored within the EU. The specific region is agreed with each client as part of their Data Processing Agreement.

6. How we protect it
Data is encrypted in transit and at rest. Access is limited to staff who need it, on a role-based basis.

7. Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, receive it in a portable format, and withdraw consent. You also have the right to complain to a supervisory authority.

To exercise any of these, contact paddy@spoqai.com. We respond within 30 days.

If you are the customer of a brand using SpoQ, please direct your request to that brand — they control your data, and we will assist them in responding.

8. Cookies
We use cookies to run the site, remember your preferences, and understand how the site is used.

9. Children
SpoQ is not intended for children, and we do not knowingly collect their data. The minimum age varies by jurisdiction: 13 in the United States, 16 in the European Union, and 18 in India.

10. Changes to this policy
We may update this policy from time to time. Material changes will be notified to clients directly, and the date at the top of this page will change.

paddy@spoqai.com
SpoQAI
C-2, Sector 2, Noida, Uttar Pradesh, India