Privacy Policy
Effective date: July 26, 2026
This Privacy Policy explains how RUBICON TECHNOLOGIES LLP (“ChatRex”, “we”, “us”) collects, uses, stores, and shares personal data when you visit ChatRex websites, create an account, use the ChatRex platform, or connect ChatRex to WooCommerce or another service.
1. Who we are
The data controller for ChatRex account and website information is:
RUBICON TECHNOLOGIES LLP
BIN 221140012450
12 Saryarka Avenue, Saryarka District
Astana 010000, Republic of Kazakhstan
Email: info@chatrex.pro
When we process personal data from a merchant’s store, CRM, communication channel, or customer conversations on the merchant’s instructions, the merchant is normally the controller and ChatRex acts as its processor or service provider.
2. Information we collect
Depending on how the Service is used, we may process:
Account information
WooCommerce and integration data
Chatbot and conversation data
We obtain information:
We process personal data to:
5. Artificial intelligence processing
Customer Content may be sent to AI technology providers, including OpenAI, to generate responses, analyze instructions, retrieve relevant knowledge, or perform other enabled features.
AI processing may involve message text, prompts, relevant store information, and knowledge-base content. Merchants should not configure ChatRex to send information that is unnecessary for the requested purpose.
ChatRex does not make legally binding or similarly significant decisions about individuals solely through AI unless a customer separately establishes a lawful basis, provides required notices, and implements appropriate safeguards and human review.
6. How we share information
We may share information with:
We do not sell personal data for monetary consideration.
7. International transfers
ChatRex and its service providers may process information in countries other than the country where it was collected.
Where required, we use appropriate transfer mechanisms and safeguards, which may include contractual protections, adequacy decisions, consent, or other mechanisms recognized by applicable law.
By enabling integrations involving international providers, merchants instruct ChatRex to perform transfers necessary to provide those integrations, subject to applicable law.
8. Data retention
We retain personal data only for as long as necessary to:
After termination or a valid deletion request, applicable data is deleted or anonymized within the operational retention period, except where continued retention is legally required. Residual encrypted backup copies are deleted through the normal backup lifecycle.
Before publication, ChatRex must insert its actual operational periods here, including the deletion period after account closure, security-log retention, and maximum backup lifecycle
9. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal data, including access restrictions, authentication controls, encryption where appropriate, logging, monitoring, and backup procedures.
No online service can guarantee absolute security. Customers are responsible for protecting their credentials, configuring appropriate permissions, and keeping WordPress, WooCommerce, and installed plugins updated.
10. Merchant responsibilities
Merchants using ChatRex must:
11. Your rights
Depending on applicable law, you may have the right to:
We may need to verify your identity. If ChatRex processes the relevant data solely for a merchant, we may forward the request to that merchant or ask you to contact it directly.
12. Cookies
ChatRex websites may use necessary cookies for authentication, security, language preferences, and core functionality.
Analytics or marketing cookies will be used only where permitted and, where required, after consent. Available cookie choices may be managed through the website’s cookie controls.
13. Children
The Service is intended for businesses and is not directed to children. ChatRex does not knowingly allow children to create business accounts.
Merchants must not use ChatRex to collect children’s personal data unless they have established a valid legal basis and implemented all required safeguards.
14. Changes to this policy
We may update this Privacy Policy when the Service, law, or our processing practices change.
The effective date will be updated, and additional notice will be provided where required.
15. Contact and complaints
Privacy questions and requests may be sent to:
RUBICON TECHNOLOGIES LLP
Email: info@chatrex.pro
You may also lodge a complaint with the competent data-protection authority in your jurisdiction.
This Privacy Policy explains how RUBICON TECHNOLOGIES LLP (“ChatRex”, “we”, “us”) collects, uses, stores, and shares personal data when you visit ChatRex websites, create an account, use the ChatRex platform, or connect ChatRex to WooCommerce or another service.
1. Who we are
The data controller for ChatRex account and website information is:
RUBICON TECHNOLOGIES LLP
BIN 221140012450
12 Saryarka Avenue, Saryarka District
Astana 010000, Republic of Kazakhstan
Email: info@chatrex.pro
When we process personal data from a merchant’s store, CRM, communication channel, or customer conversations on the merchant’s instructions, the merchant is normally the controller and ChatRex acts as its processor or service provider.
2. Information we collect
Depending on how the Service is used, we may process:
Account information
- name;
- email address and telephone number;
- company name and role;
- authentication and account-security information;
- language, plan, and account settings.
- selected plan and billing history;
- transaction and invoice identifiers;
- subscription status;
- marketplace contract identifiers.
WooCommerce and integration data
- store URL and technical identifiers;
- plugin version and connection status;
- API credentials, access tokens, and webhook identifiers;
- product names, descriptions, categories, prices, images, and inventory;
- order identifiers, contents, amounts, statuses, and delivery information;
- customer names, contact details, billing and shipping information;
- information required to execute merchant-configured actions.
Chatbot and conversation data
- messages and conversation history;
- names and contact details included in messages;
- chatbot prompts, instructions, goals, and configuration;
- AI-generated responses;
- operator notes and escalation information;
- files and knowledge-base materials uploaded by the merchant.
- IP address;
- browser, device, and operating-system information;
- access dates and times;
- diagnostic, security, and audit logs;
- pages and features used;
- errors and performance information.
- support requests;
- correspondence and call details;
- information provided during demonstrations, onboarding, or troubleshooting.
We obtain information:
- directly from account holders and website visitors;
- from connected WooCommerce stores and other authorized integrations;
- from customers and other individuals communicating with a configured chatbot;
- from payment providers and marketplaces;
- automatically through logs, cookies, and similar technologies;
- from authorized employees or representatives of a customer.
We process personal data to:
- create and administer accounts;
- provide requested chatbot and integration functionality;
- synchronize permitted store and business information;
- generate responses and perform configured actions;
- process subscriptions and payments;
- provide support and troubleshoot errors;
- secure the Service and prevent abuse;
- comply with legal and accounting obligations;
- improve Service performance and usability;
- send service-related communications;
- send marketing communications where permitted.
- performance of a contract;
- compliance with a legal obligation;
- our legitimate interests in operating, securing, and improving the Service;
- consent;
- documented instructions from a merchant acting as controller.
5. Artificial intelligence processing
Customer Content may be sent to AI technology providers, including OpenAI, to generate responses, analyze instructions, retrieve relevant knowledge, or perform other enabled features.
AI processing may involve message text, prompts, relevant store information, and knowledge-base content. Merchants should not configure ChatRex to send information that is unnecessary for the requested purpose.
ChatRex does not make legally binding or similarly significant decisions about individuals solely through AI unless a customer separately establishes a lawful basis, provides required notices, and implements appropriate safeguards and human review.
6. How we share information
We may share information with:
- hosting, database, storage, and content-delivery providers;
- AI technology providers, including OpenAI;
- payment and subscription providers;
- email, support, monitoring, and security providers;
- WooCommerce and other services connected by the customer;
- professional advisers and auditors;
- government authorities where disclosure is legally required;
- a buyer or successor in connection with a merger, financing, restructuring, or sale of assets.
We do not sell personal data for monetary consideration.
7. International transfers
ChatRex and its service providers may process information in countries other than the country where it was collected.
Where required, we use appropriate transfer mechanisms and safeguards, which may include contractual protections, adequacy decisions, consent, or other mechanisms recognized by applicable law.
By enabling integrations involving international providers, merchants instruct ChatRex to perform transfers necessary to provide those integrations, subject to applicable law.
8. Data retention
We retain personal data only for as long as necessary to:
- provide the Service;
- follow documented customer instructions;
- maintain security and audit records;
- resolve disputes;
- enforce agreements;
- comply with accounting, tax, and legal obligations.
After termination or a valid deletion request, applicable data is deleted or anonymized within the operational retention period, except where continued retention is legally required. Residual encrypted backup copies are deleted through the normal backup lifecycle.
Before publication, ChatRex must insert its actual operational periods here, including the deletion period after account closure, security-log retention, and maximum backup lifecycle
9. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal data, including access restrictions, authentication controls, encryption where appropriate, logging, monitoring, and backup procedures.
No online service can guarantee absolute security. Customers are responsible for protecting their credentials, configuring appropriate permissions, and keeping WordPress, WooCommerce, and installed plugins updated.
10. Merchant responsibilities
Merchants using ChatRex must:
- provide their own customers with an accurate privacy notice;
- identify ChatRex and relevant AI or integration processing where required;
- establish a lawful basis for processing;
- collect valid consent where required;
- limit data to what is necessary;
- respond to data-subject requests;
- configure retention and access appropriately;
- avoid submitting prohibited or unnecessary sensitive information.
11. Your rights
Depending on applicable law, you may have the right to:
- request access to your personal data;
- correct inaccurate information;
- request deletion;
- restrict or object to processing;
- receive certain data in a portable format;
- withdraw consent;
- object to direct marketing;
- complain to a competent data-protection authority;
- request information about automated processing and applicable safeguards.
We may need to verify your identity. If ChatRex processes the relevant data solely for a merchant, we may forward the request to that merchant or ask you to contact it directly.
12. Cookies
ChatRex websites may use necessary cookies for authentication, security, language preferences, and core functionality.
Analytics or marketing cookies will be used only where permitted and, where required, after consent. Available cookie choices may be managed through the website’s cookie controls.
13. Children
The Service is intended for businesses and is not directed to children. ChatRex does not knowingly allow children to create business accounts.
Merchants must not use ChatRex to collect children’s personal data unless they have established a valid legal basis and implemented all required safeguards.
14. Changes to this policy
We may update this Privacy Policy when the Service, law, or our processing practices change.
The effective date will be updated, and additional notice will be provided where required.
15. Contact and complaints
Privacy questions and requests may be sent to:
RUBICON TECHNOLOGIES LLP
Email: info@chatrex.pro
You may also lodge a complaint with the competent data-protection authority in your jurisdiction.