Privacy Policy

This Privacy Policy explains how Devoids("we", "us") processes personal data when you use Dexter—our AI chatbot platform and embeddable widget.

Two audiences:

• Customers: who register for a Dexter dashboard account ("you" as a business user).
• Website visitors: who interact with a chatbot embedded on a customer's site ("visitors" or "end users"). For visitor data, the customer is typically the data controller and Devoids acts as a processor providing infrastructure on the customer's instructions.

When you sign up or use the dashboard, we may collect:

• Account details: name, email address, password (stored hashed), optional company name, phone, country code, and profile description.
• Authentication data: session tokens via HTTP-only cookies (and similar mechanisms) to keep you signed in.
• Configuration data: chatbot names, custom instructions, welcome messages, colors, embed settings, uploaded avatars, and API keys you provide (stored encrypted).
• Usage and billing: subscription status, message volumes, token usage aggregates, support tickets you submit, and analytics shown in your dashboard.

When someone uses a Dexter widget on a customer's website, we may process the following on behalf of that customer:

• Identifiers: a pseudonymous visitor ID stored in the browser's local storage (UUID), a chat session ID, and optional session storage flags (e.g. whether the contact gate was completed).
• Contact & lead information: name, email, phone, and optional fields such as company or address when submitted through the pre-chat contact gate or captured during conversation.
• Chat content: messages sent by the visitor and AI-generated replies, plus session metadata such as message count, duration, satisfaction score, token usage, and an optional session summary.
• Device & technical data: device type (mobile, tablet, desktop), browser locale, timezone label, referrer/page context where available, and IP address.
• Approximate location: country and city derived from IP or CDN headers (e.g. Cloudflare), when enabled on our servers.
• Widget analytics events: impressions (widget load), chat panel opens, and lead-gate views, linked to the visitor key and technical fields above.

Before chat, visitors may be required to accept this Privacy Policy and our Terms of Use via a checkbox on the contact gate. Do not use the widget if you do not agree.

We use personal data to:

• Provide, secure, and improve the Dexter platform.
• Authenticate dashboard users and enforce account policies.
• Route chat messages to the AI model configured by the customer using the customer's API keys.
• Store chat history, leads, and analytics for customers in their dashboard.
• Detect abuse, debug errors, and maintain service reliability.
• Communicate about the Service (e.g. security notices or support responses).
• Comply with legal obligations.

We do not sell visitor chat content to third parties for their independent marketing. Customers choose how they use leads in their own CRM or sales processes.

Chat messages are sent to the AI provider selected by the customer (OpenAI, Anthropic, Google Gemini, Mistral, or others we support), using API keys the customer stores in Dexter. Those providers process data under their own terms and privacy policies.

Dexter may append standard instructions so assistants can help with qualified lead capture (for example, prompting for contact details when appropriate). A machine-readable lead marker in responses is stripped before text is shown to visitors and is used only to save lead records the visitor clearly provided.

We also use hosting, database, email, and infrastructure vendors necessary to run the Service. They may process data only to perform services for us under contractual safeguards.

• Dashboard: authentication cookies to maintain your session; optional UI preference cookies (e.g. sidebar state).
• Widget: local storage for visitor ID and session continuity; session storage for gate completion state. These are not used for cross-site advertising by Dexter.

Customers who embed the widget should disclose cookies and storage in their own site cookie notice where required.

We retain account and chatbot data while your account is active and for a reasonable period afterward to meet legal, security, and backup needs. Customers may delete chat sessions from the dashboard where that feature is available. Aggregated analytics may be kept in depersonalized form.

Specific retention periods may vary by plan or request. Contact us to discuss deletion of your account data.

We use industry-standard measures such as encryption in transit (HTTPS), hashed passwords, encrypted API keys, access controls, and monitoring. No method of transmission or storage is 100% secure; you use the Service at your own risk and should protect your credentials.

Data may be processed in India and other countries where we or our subprocessors operate. Where required, we implement appropriate safeguards for cross-border transfers.

Depending on your location, you may have rights to access, correct, delete, restrict, or port personal data, and to object to certain processing. Dashboard users can update profile fields in settings. Visitors should contact the website operator (the Dexter customer) first; we will assist customers in responding to valid requests.

To exercise rights with Devoids directly regarding your account, contact us at https://devoids.in. We may verify your identity before responding.

Dexter is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided data through a widget, contact us and the site operator so it can be removed.

If you embed Dexter on your website, you are responsible for:

• Telling visitors what you collect and why, in a clear privacy notice.
• Obtaining lawful bases and consents where required (e.g. GDPR, ePrivacy, local marketing laws).
• Configuring the bot so it does not collect unnecessary sensitive data.
• Honoring visitor rights requests for data you control as controller.

We may update this Policy. The "Last updated" date at the top will change when we do. Material changes may be communicated via the Service or email where appropriate.

Data protection inquiries: https://devoids.in
Product: dexter.devoids.com