Privacy Policy

Last updated: March 21, 2026

1. Who we are

Kisvar provides AI chatbot services for websites. This policy explains how we process personal data when you use our website, dashboard, and chat widget. Kisvar is operated from Norway.

2. Data we collect

  • Account data: email, username, and login information.
  • Customer data: chat messages, timestamps, and technical metadata.
  • Technical data: IP address, browser, device, and security logs.
  • Support data: information you submit through contact forms.

3. Legal basis for processing

We process personal data based on the following legal grounds under GDPR Article 6:

  • Contract: to provide the service you signed up for (account, dashboard, chatbot).
  • Legitimate interest: to improve service quality, ensure security, and prevent abuse.
  • Legal obligation: to comply with applicable laws and regulations.
  • Consent: where required, such as optional notifications or marketing.

4. Why we process data

  • Deliver and operate the service.
  • Improve quality, security, and reliability.
  • Respond to support requests.
  • Meet legal obligations and prevent misuse.

5. Data sharing and third-party processors

We only share data with subprocessors required to run the service. These include:

  • AI providers: OpenAI (USA), Anthropic/Claude (USA), DeepSeek (China) - for generating chatbot responses.
  • Hosting: server infrastructure for running the platform.
  • Email: for account verification and password recovery.
  • Telegram: if you enable the Telegram integration.

6. International data transfers

Some of our AI providers are located outside the EU/EEA. When data is transferred internationally, we rely on appropriate safeguards as required by GDPR, including standard contractual clauses where applicable.

7. Retention

Personal data is stored as long as needed for the purpose, or as required by law. You may request deletion of your account and related data at any time.

8. Your rights

Under GDPR, you have the right to:

  • Access the data we hold about you.
  • Correct inaccurate data.
  • Request deletion or restriction of processing.
  • Data portability.
  • Object to processing based on legitimate interest.
  • Lodge a complaint with your local data protection authority (in Norway: Datatilsynet, datatilsynet.no).

9. Cookies

We use strictly necessary cookies for login sessions, CSRF protection, and core functionality. We do not use tracking or advertising cookies.

10. Contact

If you have privacy questions, use our support page.