Privacy Policy
Effective date: May 2025
Last updated: May 2026
1. Who We Are
ClientX ("we", "our", "us") is an AI-powered inbound conversion platform operated by Continum. We provide businesses with an embeddable AI chat widget that engages website visitors, captures leads, and books meetings.
For privacy enquiries: privacy@clientx.in
2. What Data We Collect
From workspace owners (our customers):
Name, email address, and billing information when you sign up
Configuration data: agent settings, knowledge sources, CTA links, calendar connections
Usage data: conversation counts, lead records, analytics
From website visitors (visitors to our customers' sites):
Messages submitted through the ClientX chat widget
Contact details voluntarily provided (name, email, phone)
Device and browser information (browser type, operating system, screen size)
IP address and approximate location (city/country level)
Page URL and referrer at the time of the conversation
Meeting preferences and booking details if a calendar integration is used
Visitor Identification (B2B — optional feature):
When a workspace owner has enabled and purchased the Visitor ID feature, an additional tracking script provided by our sub-processor RB2B may be active on their website. This script uses cookies and similar technologies to identify anonymous B2B visitors and may associate website activity with professional identity data including:
Full name
Business email address
Job title
Company name
LinkedIn profile URL
This feature is only active on websites where the owner has explicitly purchased and enabled it. It is not active by default.
We do not collect payment card numbers, government-issued IDs, or sensitive personal data (health, biometric, or financial account information).
3. How We Use Your Data
We use the data we collect to:
Power the AI conversation engine and deliver relevant responses to visitors
Deliver captured lead data (contact details, conversation summaries) to workspace owners
Schedule and confirm meetings via calendar integrations
Send lead notification emails and product updates to workspace owners
Improve platform performance, train on anonymised conversation patterns, and detect abuse
Meet legal and compliance obligations
Provide customer support
We do not use visitor data for advertising. We do not sell personal data to third parties.
4. Who We Share Data With
We share data only with the following parties, strictly to operate the platform:
Recipient | Purpose |
|---|---|
Website owners (workspace owners) | Receive lead records and conversation data from their own site visitors |
Anthropic | AI inference API — processes conversation messages to generate responses |
Supabase | Cloud database and authentication provider |
Resend | Transactional email delivery (lead notifications, account emails) |
Calendar services (Google Calendar, Cal.com) | Meeting scheduling when booking integration is enabled |
Dodo Payments | Payment processing for subscriptions and one-time purchases |
RB2B | Visitor identity resolution — only active for workspace owners who have purchased the Visitor ID feature |
We do not sell, rent, or broker personal data to any third party. All sub-processors are bound by data processing agreements.
5. Visitor Identification & Opt-Out
Some websites using ClientX have enabled the optional Visitor ID feature. When active, cookies and similar technologies may be used by our data partner RB2B to associate your website visit with professional identity data (name, company, business email, LinkedIn profile).
If you do not wish to be identified:
Global opt-out (US): https://app.retention.com/optout
GDPR opt-out (EEA): https://www.rb2b.com/rb2b-gdpr-opt-out
These opt-outs apply across all websites using RB2B's technology, including those powered by ClientX.
6. Legal Basis for Processing (GDPR)
For visitors located in the European Economic Area (EEA), UK, or Switzerland, we rely on the following legal bases:
Legitimate interests — delivering the AI assistant service to website owners, capturing leads on their behalf, and improving the platform
Consent — where we collect contact details through the widget, visitors voluntarily submit that information
Contract — processing workspace owner data to fulfil our service agreement
Where Visitor ID is active, the website owner is the data controller for identified visitor data and is responsible for ensuring their own legal basis (typically legitimate interest for B2B outreach).
7. Your Rights
You have the right to:
Access — request a copy of the personal data we hold about you
Correction — request that inaccurate data be corrected
Deletion — request that your data be deleted ("right to be forgotten")
Restriction — request that we limit how we process your data
Portability — receive your data in a machine-readable format
Object — object to processing based on legitimate interests
To exercise any of these rights, email privacy@clientx.in. We will respond within 30 days.
8. Data Retention
Data type | Retention period |
|---|---|
Conversation messages | 24 months from last session |
Lead records | Until deletion is requested by workspace owner |
Identified visitor data (Visitor ID) | 24 months or until opt-out request |
Technical logs | 90 days |
Workspace account data | Duration of account + 90 days after deletion |
9. Data Security
We protect your data using:
TLS encryption for all data in transit
Encryption at rest for database storage (Supabase)
Role-based access controls — staff access is limited to what is necessary
Regular security reviews
No system is 100% secure. In the event of a data breach that affects your rights, we will notify affected parties as required by applicable law.
10. Children's Privacy
ClientX is a B2B platform intended for use by businesses. We do not knowingly collect personal data from individuals under the age of 16. If you believe a minor has submitted data through a ClientX-powered widget, contact us at privacy@clientx.in and we will delete it promptly.
11. Cookies and Local Storage
The ClientX widget stores a visitor session token in your browser's localStorage to maintain conversation continuity across page loads. This is a functional identifier only — it is not used for tracking, advertising, or cross-site profiling.
When Visitor ID is active, the RB2B script may also set cookies for the purpose of visitor identification. See Section 5 for opt-out options.
12. International Data Transfers
ClientX's servers are located in the United States. If you are visiting from the EEA, UK, or other regions with data transfer restrictions, your data may be transferred to and processed in the US. We rely on standard contractual clauses (SCCs) and other appropriate safeguards where required.
13. Changes to This Policy
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify workspace owners by email. Continued use of the platform after changes constitutes acceptance.
14. Contact
For any privacy-related questions, data requests, or concerns:
Email: hey@continum.in
Company: Continum
Product: ClientX clientx.in