Privacy Policy

For data about visitors and our business customers, Chiron Intelligence LLC is the controller. For data in the WhatsApp conversations between our customers and their own customers, the business using Supacell is the controller and we are its processor. If you messaged a business that uses Supacell, please contact that business first about your data.

• Contact details: name, business name, email, phone number when you ask for a demo or sign up.
• Account and billing data: plan, invoices and payment details (handled by our payment provider; we do not store full card numbers).
• Business content: the services, prices, FAQs and processes you give us.
• Conversation data: WhatsApp messages, names and phone numbers processed on behalf of our customers.
• Technical data: IP address, browser, device and pages viewed on our website.

• To provide and support the service (performance of a contract).
• To reply to demo requests and enquiries (legitimate interests, or steps before a contract).
• To bill you and meet tax and accounting rules (legal obligation).
• To keep the service secure and improve it (legitimate interests).
• To send you marketing, only where you have agreed or the law allows; you can opt out at any time (consent or legitimate interests).

Supacell uses AI models to read and reply to messages. Conversation data is sent to our AI providers only to generate replies, under contracts that stop them using it to train their own models. We do not make decisions with legal or similarly significant effects on people solely by automated means.

We share data only with service providers that help us run Supacell, such as hosting, AI model, messaging (Meta and WhatsApp), payment and email providers, and with professional advisers or authorities where the law requires.

We do not sell or share personal information for cross context behavioural advertising, as those terms are defined under California law.

We are a US company and some of our providers are outside the UK. When UK personal data is transferred abroad we use approved safeguards, such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses or the UK Extension to the EU US Data Privacy Framework.

We keep account data while you are a customer and for up to 6 years afterwards for legal and tax reasons. Conversation data is kept for as long as our customer instructs, and deleted within 30 days of the end of their subscription unless they ask us to delete it sooner. Website analytics data is kept for up to 26 months.

We use encryption in transit and at rest, access controls and regular reviews to protect personal data. If a breach is likely to put you at risk, we will tell you and the relevant regulator as the law requires.

You can ask to access, correct, delete, restrict or move your data, object to our processing, and withdraw consent at any time. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, though we would appreciate the chance to help first.

Depending on your state, including California, Colorado, Connecticut, Virginia and others, you may have the right to know what personal information we hold, to access, correct or delete it, to opt out of sale, sharing or targeted advertising, and to limit use of sensitive information. We will not discriminate against you for using these rights. You may use an authorised agent, and we will verify requests before acting. If we refuse a request you may appeal by replying to our decision.

Our website uses only cookies that are needed for it to work and, where you agree, basic analytics. You can block cookies in your browser settings. We honour Global Privacy Control signals as an opt out where the law requires.

Supacell is a business service and is not aimed at children under 16. We do not knowingly collect their data.

We will post any changes on this page and update the date above. If the changes are significant we will tell our customers by email.

To use your rights or ask a question, email hello@supacell.ai. We reply within one month (UK) or 45 days (US).