This page describes the specific privacy choices available to you under the California Consumer Privacy Act (CCPA) as amended by the CPRA, the Colorado Privacy Act, the Virginia Consumer Data Protection Act, the Connecticut Data Privacy Act, and equivalent laws in other US states. It also covers our global AI training opt-out, which applies to all users regardless of location.
We do not sell your personal information
chatbrat.ai does not sell your personal information to third parties. We also do not share your personal information with third parties for cross-context behavioral advertising. You have the right to opt out of any sale or sharing — although there is nothing to opt out of at this time, the right is yours.
AI training opt-out (all users)
We may use aggregated, de-identified interaction data to improve our AI systems. We will not use your personally identifiable conversation content for AI model training without your explicit opt-in. You may opt out of any AI training use of your data at any time:
- In Settings:Settings → Privacy → AI training — toggle off.
- By email: send "AI Training Opt-Out" to [email protected] from the address on your account.
AI training is default OFF for EU, UK, and California residents. Withdrawal of consent does not affect models trained before your withdrawal, but we will not re-ingest your data after the point of withdrawal.
Your rights under CCPA/CPRA and equivalent state laws
- Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you, the purposes for which we collect it, and the third parties with whom we share it.
- Right to access — obtain a copy of the personal information we hold about you in a portable format.
- Right to deletion — request deletion of your personal information, subject to certain legal exceptions (e.g., legal obligation to retain moderation records).
- Right to correction — request correction of inaccurate personal information.
- Right to opt out of sale/sharing — opt out of any sale or sharing of your personal information for cross-context behavioral advertising. (We do not currently sell or share for this purpose.)
- Right to limit use of sensitive personal information — limit our use of sensitive personal information (e.g., account credentials, precise location) to the purposes necessary to provide the service.
- Right to non-discrimination — we will not discriminate against you for exercising any of these rights.
How to make a request
Email [email protected] from the address on your account with the subject line "Privacy Request" and specify what you would like to do. We respond within 45 days for CCPA requests (extendable to 90 days for complex requests with prior notice), and within 30 days for GDPR/UK GDPR requests.
We will verify your identity before processing any access, deletion, or correction request. Verification is typically done by confirming ownership of the email address on your account.
You may designate an authorised agent to make requests on your behalf. Agents must provide written authorisation signed by you.
Global Privacy Control (GPC)
We honor the Global Privacy Control signal. If your browser sends Sec-GPC: 1, we treat that as an automatic opt-out of sale or sharing of your personal information and as rejection of non-essential analytics cookies.
Analytics opt-out
PostHog analytics are consent-gated and only activate after you accept the cookie banner. You can withdraw analytics consent at any time by clearing the cb-analytics-consent cookie in your browser — the banner will reappear on your next visit. See our Cookie Policy for full details.
Contact
Privacy and opt-out requests: [email protected].