Privacy
Last updated: October 2026
This policy explains what personal data Erghi collects through its website, chat widget, and admin platform, how it's used, and the rights you have over it. Erghi is a small, independently operated company — if anything here is unclear, email hello@erghi.ai and a real person will answer.
For data connected to your own Erghi account — your name, email, and workspace activity — Erghi is the data controller. If you're a visitor chatting with an Erghi-powered widget on one of our customers' websites, that customer is the data controller for your conversation, and Erghi processes it on their behalf as a data processor. If that's your situation, please direct data requests to the business whose website you were using — we support them in fulfilling those requests.
Account and workspace data you provide when signing up (name, email, company); chat conversation content sent through the widget by visitors to our customers' sites; usage data (page views, widget loads) for reliability and analytics; and payment details, processed directly by our payment provider (Paddle) — Erghi never stores full card numbers.
We process account and billing data to perform our contract with you, process visitor conversation data on our customers' documented instructions, and rely on legitimate interest for security, fraud prevention, and service reliability. Where we rely on consent — for optional communications, for example — you can withdraw it at any time.
Chat replies are generated using AI models from providers such as OpenAI, Anthropic, and Groq, which process message content to return a response under their own data-processing terms. When a business turns on voice notes, a visitor's recording is sent to Groq to be transcribed; the transcript becomes the visitor's message and the audio is not stored. Replies read aloud are spoken by the visitor's own device and are not sent anywhere for that. Erghi does not make any decision with legal or similarly significant effects using AI alone — human handoff to a live agent is available on every plan, including Free.
We share data with a limited set of sub-processors strictly to run the service: OpenAI, Anthropic, and Groq (AI replies; Groq also transcribes voice notes), Stripe and Paddle (payments — Paddle also acts as the Merchant of Record for your purchase), Sentry (error monitoring), Amazon Web Services (server hosting), Cloudflare (website delivery), and Microsoft (transactional email). Some of these process data outside your country, including in the United States; where that happens, we and our sub-processors rely on standard contractual clauses or an equivalent legal safeguard recognized under applicable data protection law.
We use only the cookies strictly necessary to operate the website, widget, and admin platform, plus limited functional cookies from our error-monitoring tooling. We do not use third-party advertising or cross-site tracking cookies.
Conversation history, including attachments, is kept for your plan's history window (7 days on Free, 30 on Starter, 90 or more on Growth and Enterprise) and then deleted automatically. Account and workspace data is kept while your account is active. When you delete your account, it is deactivated immediately and can be restored for 30 days; after that, your workspaces, conversations, knowledge-base documents, widgets and team logins are permanently deleted. We keep three things for longer: security audit logs (who changed what, and when) for 12 months after deletion, after which names, email addresses, IP addresses and details are removed from them; billing and transaction records (plan, amounts, dates and payment-provider references, with no contact details or card data) for as long as accounting, tax and legal obligations require, which may be indefinitely; and database backups, which roll over within 30 days, so deleted data disappears from them by then. Our payment provider and Merchant of Record, Paddle, keeps its own invoice and payment records under its own privacy policy.
Depending on your location, you may have the right to access, correct, delete, or export your personal data, restrict or object to its processing, and withdraw consent at any time — email hello@erghi.ai to exercise any of these. You also have the right to lodge a complaint with your local data protection authority (in the EU/EEA, your national supervisory authority; in Egypt, the Personal Data Protection Centre).
Erghi is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
We apply reasonable technical and organizational safeguards, including encrypting stored credentials and restricting internal access on a need-to-know basis. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.
If a breach affecting your personal data occurs, we will notify affected users and any relevant regulator without undue delay, consistent with applicable law, including the 72-hour notification windows under the GDPR and Egypt's Personal Data Protection Law.
We may update this policy as our product or legal obligations change. Material changes will be reflected in the "last updated" date above; continued use of Erghi after a change means you accept the updated policy.
Questions about this policy or your data can be sent to hello@erghi.ai.