Service Privacy Notice

Privacy Built Into Every Conversation.

ChatBeacon is built on a straightforward principle: the organization using the platform remains in control of its customer conversations and determines how it uses information collected through them. SmartMax Software, Inc. develops, licenses, hosts where applicable, and supports ChatBeacon. Each customer configures its ChatBeacon environment and determines what information its chat experience requests, who may access it, and how it is used within the organization.

This page explains how privacy responsibilities are divided across ChatBeacon and where to direct privacy questions or requests. It supplements applicable customer agreements and product documentation and does not replace SmartMax Software, Inc.’s General Privacy Policy.

Why you may have been directed here.

You may have arrived through a link in another organization’s privacy policy, AI notice, Trust Center, or technology provider list. This generally means the organization uses ChatBeacon to provide AI-assisted or live chat communications to its customers, website visitors, or other users.

The organization using ChatBeacon determines which features are enabled, what information its chat experience requests, who on its team may access conversations, and how that information is used within its business. Depending on the deployment, the organization may administer ChatBeacon directly, or SmartMax Software, Inc. may host and manage the environment on its behalf.

Hosting and data-management responsibilities vary by deployment model, as explained below. If your question concerns a specific conversation, contact the organization whose website, mobile app, customer portal, or other communication or support channel you used.

How privacy responsibilities are divided

ChatBeacon is an enterprise software platform provided to customer organizations. It is not an outsourced customer support service. SmartMax Software, Inc. does not staff its customers’ support teams, respond to their end users on their behalf, or independently determine why a customer collects or uses information through ChatBeacon.

The ChatBeacon customer

  • Selects its ChatBeacon deployment, features, and configuration
  • Determines why information is collected and how it is used
  • Is generally the data controller or business responsible for its end users' information
  • Manages authorized access and handles requests concerning its conversations

SmartMax Software, Inc.

  • Develops, provides, hosts and manages where applicable, and supports ChatBeacon
  • Generally processes conversation data as a data processor or service provider under its agreement with the customer
  • Maintains the security and reliability of platform components within SmartMax’s control and provides technical support
  • Processes customer conversation data according to customer instructions and the applicable agreement

Privacy roles can vary by jurisdiction, contract, and deployment model, so the roles above describe the typical case rather than every case. Separately, SmartMax remains directly responsible for information we collect for our own purposes, including sales, contracting, billing, account administration, support, security, and business operations.

Information that may be processed

Depending on the customer’s configuration, enabled features, and deployment model, ChatBeacon may process:

Chat messages and transcripts
The conversation content exchanged between a visitor, the AI, and any live agent.
Information entered into chat forms
Pre-chat, in-chat, and post-chat form fields the customer has published.
Contact information provided
Details an individual provides, such as a name, email address, or phone number.
Files or content voluntarily shared
Attachments or other material an individual sends during a conversation.
Technical, account, configuration, activity, and security information
Operational data used to run, administer, secure, and troubleshoot the platform.
AI prompts, responses, summaries, or classifications
Generated when the customer has enabled AI features.

The information processed in any given deployment depends on the customer’s configuration, enabled features, deployment model, and the information an individual provides.

GDPR and Data Protection

ChatBeacon is designed to support organizations that are subject to the General Data Protection Regulation ("GDPR"), UK data-protection law, and other applicable privacy and data-protection requirements.

Privacy responsibilities depend on the specific processing activity, jurisdiction, contractual terms, customer configuration, and deployment model. The descriptions below reflect the typical relationship between SmartMax Software, Inc. and organizations using ChatBeacon.

Controller and Processor Responsibilities
For customer conversations and other customer-controlled information processed through ChatBeacon, the customer generally determines why personal information is collected, what information is requested, how it is used, how long it should be retained, and who within the organization may access it.

In these circumstances, the customer generally acts as the data controller, or equivalent responsible party under applicable law, and SmartMax generally acts as a data processor or service provider acting on the customer's documented instructions.

SmartMax may separately act as a controller for personal information it processes for its own business purposes, including sales, contracting, billing, account administration, security, support, and business operations.

The GDPR requires controllers and processors to have clearly defined responsibilities, including appropriate contractual terms governing processing performed on behalf of a controller. SmartMax addresses applicable processing responsibilities through customer agreements and, where appropriate, a Data Processing Addendum.
Customer Control Over Data Collection and Use

ChatBeacon customers control many of the decisions that affect personal information processed through the platform, including:

  • the ChatBeacon deployment model selected;
  • which AI, live chat, and customer-engagement features are enabled;
  • information requested through pre-chat, in-chat, and post-chat forms;
  • authorized users and administrative permissions;
  • connected knowledge sources and integrations;
  • AI configuration and escalation settings;
  • conversation and data-retention settings available within the applicable deployment; and
  • how information collected through ChatBeacon is used within the customer's organization.

Customers are responsible for configuring and using ChatBeacon in accordance with their own legal, regulatory, contractual, and privacy obligations.

Supporting Data-Subject Requests
Depending on applicable law, individuals may have rights relating to their personal information, including access, correction, deletion, restriction, objection, or portability.

For information associated with a ChatBeacon conversation, the organization using ChatBeacon is generally responsible for receiving and evaluating the individual's request because that organization determines the purposes for which the information was collected and used.

Where SmartMax acts as a processor, we support customers with applicable requests as required by law, contractual obligations, and the technical capabilities of the applicable deployment.

If you are an end user seeking access to, correction of, or deletion of information from a specific ChatBeacon conversation, contact the organization whose website, application, portal, or support channel you used.
Retention and Deletion
Retention requirements vary by customer, jurisdiction, contract, configuration, and deployment model.

ChatBeacon customers determine the retention requirements applicable to their customer conversations and should configure and administer their environments in accordance with those requirements.

Where SmartMax hosts or manages the applicable environment, retention and deletion are handled in accordance with the customer's configuration, applicable agreement, product capabilities, and legal requirements.

For On-Premise deployments, the customer operates the infrastructure and generally exercises greater direct control over storage, retention, backup, deletion, and related data-management practices.
Security and Organizational Safeguards
SmartMax maintains administrative, technical, and organizational safeguards designed to protect personal information processed within systems under its control.

Safeguards are designed to address risks such as unauthorized access, disclosure, alteration, misuse, or loss and may include access controls, authentication, encryption, monitoring, logging, security procedures, and organizational controls appropriate to the applicable service and deployment.

Security responsibilities vary by deployment model. Customers should review the Security Assurance and Deployment and Data Hosting resources in the ChatBeacon Trust Center for additional information.
International Data Processing and Transfers
The location in which personal information is processed depends on the customer's deployment model, configuration, service providers, and contractual arrangements.

Where personal data subject to GDPR or other applicable data-transfer requirements is transferred internationally, the parties are responsible for using an appropriate lawful transfer mechanism where required.

Contractual safeguards, including applicable Standard Contractual Clauses or other recognized transfer mechanisms, may be used where appropriate and agreed between the parties.

Customers should refer to their applicable agreement, Data Processing Addendum, and deployment documentation for information relevant to their particular environment.
Data Processing Addendum
Where required or appropriate, SmartMax makes contractual data-protection terms available to customers through a Data Processing Addendum or other applicable agreement.

These terms may address matters such as processing instructions, confidentiality, safeguards, assistance with individual-rights requests, subprocessors, security obligations, deletion or return of personal information, and other responsibilities required under applicable law.

The applicable customer agreement and Data Processing Addendum govern the contractual relationship between SmartMax and the customer. This Service Privacy Notice is provided for transparency and does not replace those agreements.
Information for End Users
If you reached this page through another organization's privacy policy, Trust Center, vendor disclosure, AI notice, or technology-provider page, that organization uses ChatBeacon as part of its customer or user communications environment.

For questions about information you provided during a particular conversation, including requests to access, correct, or delete that information, contact that organization directly.

For information SmartMax collects for its own purposes, please review the ChatBeacon Privacy Policy or contact privacy@chatbeacon.ai.

How information is used

Information processed through ChatBeacon is used to provide and support the services configured by the customer. Typical purposes include enabling AI-assisted and live chat functionality, routing and managing conversations, authenticating authorized users, maintaining, securing, and troubleshooting the platform, providing technical support, and meeting contractual and legal obligations.

SmartMax does not sell customer conversation data.

Customer control and deployment

Customers make the implementation decisions that shape their ChatBeacon experience, including deployment model, enabled features, user permissions, published forms, connected knowledge sources, AI settings, agent handoff, integrations, and administrative access.

Cloud

Operated by SmartMax as a hosted service.

Dedicated Private Cloud

Hosted and managed by SmartMax in an environment provisioned for a single customer.

On-premise

Deployed in infrastructure the customer operates.

ChatBeacon is available through Cloud, Dedicated Private Cloud, and On-Premise deployments. Data location, storage, access, retention, and security responsibilities vary by deployment model. Customers should review their agreement and product documentation or see Deployment, Data Hosting, and Sovereignty for details applicable to their environment.

AI and privacy

Learn more about our approach to AI oversight, human involvement, and customer control on the Responsible AI Governance page.


When AI features are enabled, ChatBeacon may process conversation content together with customer-approved knowledge sources to generate responses, summaries, classifications, or routing assistance. The customer determines which AI features are enabled, which knowledge sources may be used, and when and how AI-assisted conversations are transferred to a live agent.

Retention, security, and service providers

How long conversation information is retained depends on the deployment model, customer configuration, contractual terms, and applicable legal requirements. Customers should refer to their applicable agreement, configuration settings, and product documentation as the authoritative sources for retention in their environment.

SmartMax maintains administrative, technical, and organizational safeguards designed to protect the information it processes. Where applicable, SmartMax also engages selected service providers and subprocessors to deliver and support ChatBeacon.

Privacy questions and requests

There are two paths, depending on whether your request concerns a customer conversation or information provided directly to SmartMax.

Information tied to a conversation

To access, correct, or delete information associated with a ChatBeacon conversation, contact the organization whose website, application, customer portal, or support channel you used. That organization is generally responsible for the information and can act on your request, with assistance from SmartMax where applicable.

Information provided to SmartMax

For information you provided directly to SmartMax through sales, contracting, billing, account administration, support, or business operations, contact us using the details below. SmartMax will review and respond to your request in accordance with applicable law.

Contact SmartMax Software, Inc.

Privacy: privacy@chatbeacon.ai

Security: security@chatbeacon.ai

Business address: 8801 S. Yale, Ste 460, Tulsa, OK 74137 USA

Evaluating ChatBeacon for Your Organization?

Request the privacy, security, and deployment documentation applicable to your environment. Our team will help you review the relevant data flows, controls, and responsibilities.