Privacy Policy

Last updated: [DATE]. Draft: to be reviewed by a lawyer before launch.

Chen Media Labs ("we", "us") builds and runs AI systems for businesses. This policy explains what we collect, why, and the choices you have. The short version: your data is yours, we only use it to run the service for you, and we never sell it.

What we collect

Contact details you give us: name, business name, email, phone, website.
Setup calls: if you call our AI assistant, the call is recorded and transcribed so we can set up your service. You'll be told this at the start of the call.
Connected accounts: when you connect Google or Microsoft, we only request the permissions the service needs (for example, sending replies from your inbox). We never see or store your password.
Your customers' messages: to do its job, the service processes messages your customers send you (such as quote requests). We keep only what's needed to run it (like name, contact details and request type) and drop sensitive details such as dates of birth or license numbers.
Billing: payments are handled by Stripe. We never see or store full card numbers.
Website use: basic, privacy-friendly analytics (pages viewed, no ad tracking).

How we use it

Only to build, run, test, support and improve the service you asked for, to bill you, and to contact you about your account. We may use anonymized, aggregated statistics (for example, average reply times across all clients) to improve the service; these never identify you or your customers.

We never sell your data, and it is never used to train AI models

We do not sell or rent your data or your customers' data, and we don't use it for advertising.

Google user data

Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to provide the features you enabled, and we do not use it to train general AI models.

Service providers we rely on

We use trusted providers to run the service, under contracts that limit how they use data: Vercel (website hosting and storage), Cloudflare (domains), Resend (email notifications), Google and Microsoft (account connections), Stripe (payments), Twilio and ElevenLabs (phone calls), and Anthropic (AI processing). They may process data on our behalf only.

How long we keep it

While your service is active. When you cancel, we disconnect your accounts within 24 hours, send you an export of your data on request, and delete it within 30 days unless the law requires us to keep something (such as billing records).

Your choices and rights

You can ask us to access, correct, export or delete your data at any time. You can revoke our access to your Google or Microsoft account from your account settings whenever you like. Depending on where you live (for example California), you may have additional rights; we honor them, and we will not treat you differently for using them.

Security

We use encryption in transit, limited access, and secret storage for connection keys. No system is perfect; if something goes wrong that affects your data, we'll tell you promptly.

Children

The service is for businesses and is not meant for anyone under 18.

Changes

If we change this policy in a meaningful way, we'll email active clients before it takes effect.

Questions? Contact us at team@chenmedialabs.com. Alex Chen, doing business as Chen Media Labs · 28 Geary St, San Francisco, CA 94108