Privacy Policy

Last updated: July 2026

KFChow AI Lab ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights under applicable data protection laws including the GDPR.

1. Data We Collect

Data Type	Details
Chat Messages (Main Site)	Questions you submit and AI-generated responses. Stored server-side with your session identifier.
Chat Messages (Dashboard Tools)	Questions submitted in embedded dashboard chat widgets (e.g., ESG Compliance Monitor). Stored client-side in your browser's localStorage — no chat data is transmitted to our servers.
Session Data	A randomly generated session ID stored as an HttpOnly cookie (`kfchow_session`). No personally identifiable information is embedded.
Auth Provider Data	When you sign in via a third-party provider, we receive your display name and email to link your session to an account.
Operational Data	Non-personal configuration data including scan history, tracked topics, and competitor names — stored server-side to power dashboard functionality.
Analytics	Anonymous usage data via Google Analytics 4 (GA4), gated behind your cookie consent.

2. How We Use Your Data

Service provision: Chat history is stored to power the dashboard and provide continuity across sessions.
Analytics: Aggregated, anonymous GA4 data helps us understand how visitors use the site.
Communication: If you sign in, we may use your email to respond to your inquiries.
Telegram Bot: Interactions with @esgwatchbot are processed through Telegram's infrastructure and are subject to Telegram's Privacy Policy.

3. Cookies

Cookie	Purpose	Duration	Required?
`kfchow_session`	Session identifier for chat history and dashboard	30 days	Yes
GA4 cookies	Anonymous analytics	Up to 2 years	No (opt-in)
`aimeme_cookie_consent`	Records your consent choice	Persistent	Yes

4. Your Rights (GDPR)

Right of access: Request a copy of the data we hold about you.
Right to erasure: Request deletion via the dashboard or by contacting us.
Right to data portability: Request your data in a machine-readable format.
Right to object: Opt out of analytics via cookie consent.

5. Contact

For privacy inquiries: [email protected]