Privacy Policy

Effective date: May 2025
Last updated: May 2026

1. Who We Are

ClientX ("we", "our", "us") is an AI-powered inbound conversion platform operated by Continum. We provide businesses with an embeddable AI chat widget that engages website visitors, captures leads, and books meetings.

For privacy enquiries: privacy@clientx.in

2. What Data We Collect

From workspace owners (our customers):

  • Name, email address, and billing information when you sign up

  • Configuration data: agent settings, knowledge sources, CTA links, calendar connections

  • Usage data: conversation counts, lead records, analytics

From website visitors (visitors to our customers' sites):

  • Messages submitted through the ClientX chat widget

  • Contact details voluntarily provided (name, email, phone)

  • Device and browser information (browser type, operating system, screen size)

  • IP address and approximate location (city/country level)

  • Page URL and referrer at the time of the conversation

  • Meeting preferences and booking details if a calendar integration is used

Visitor Identification (B2B — optional feature):
When a workspace owner has enabled and purchased the Visitor ID feature, an additional tracking script provided by our sub-processor RB2B may be active on their website. This script uses cookies and similar technologies to identify anonymous B2B visitors and may associate website activity with professional identity data including:

  • Full name

  • Business email address

  • Job title

  • Company name

  • LinkedIn profile URL

This feature is only active on websites where the owner has explicitly purchased and enabled it. It is not active by default.

We do not collect payment card numbers, government-issued IDs, or sensitive personal data (health, biometric, or financial account information).

3. How We Use Your Data

We use the data we collect to:

  • Power the AI conversation engine and deliver relevant responses to visitors

  • Deliver captured lead data (contact details, conversation summaries) to workspace owners

  • Schedule and confirm meetings via calendar integrations

  • Send lead notification emails and product updates to workspace owners

  • Improve platform performance, train on anonymised conversation patterns, and detect abuse

  • Meet legal and compliance obligations

  • Provide customer support

We do not use visitor data for advertising. We do not sell personal data to third parties.

4. Who We Share Data With

We share data only with the following parties, strictly to operate the platform:


Recipient

Purpose

Website owners (workspace owners)

Receive lead records and conversation data from their own site visitors

Anthropic

AI inference API — processes conversation messages to generate responses

Supabase

Cloud database and authentication provider

Resend

Transactional email delivery (lead notifications, account emails)

Calendar services (Google Calendar, Cal.com)

Meeting scheduling when booking integration is enabled

Dodo Payments

Payment processing for subscriptions and one-time purchases

RB2B

Visitor identity resolution — only active for workspace owners who have purchased the Visitor ID feature

We do not sell, rent, or broker personal data to any third party. All sub-processors are bound by data processing agreements.

5. Visitor Identification & Opt-Out

Some websites using ClientX have enabled the optional Visitor ID feature. When active, cookies and similar technologies may be used by our data partner RB2B to associate your website visit with professional identity data (name, company, business email, LinkedIn profile).

If you do not wish to be identified:

These opt-outs apply across all websites using RB2B's technology, including those powered by ClientX.

6. Legal Basis for Processing (GDPR)

For visitors located in the European Economic Area (EEA), UK, or Switzerland, we rely on the following legal bases:

  • Legitimate interests — delivering the AI assistant service to website owners, capturing leads on their behalf, and improving the platform

  • Consent — where we collect contact details through the widget, visitors voluntarily submit that information

  • Contract — processing workspace owner data to fulfil our service agreement

Where Visitor ID is active, the website owner is the data controller for identified visitor data and is responsible for ensuring their own legal basis (typically legitimate interest for B2B outreach).

7. Your Rights

You have the right to:

  • Access — request a copy of the personal data we hold about you

  • Correction — request that inaccurate data be corrected

  • Deletion — request that your data be deleted ("right to be forgotten")

  • Restriction — request that we limit how we process your data

  • Portability — receive your data in a machine-readable format

  • Object — object to processing based on legitimate interests

To exercise any of these rights, email privacy@clientx.in. We will respond within 30 days.

8. Data Retention


Data type

Retention period

Conversation messages

24 months from last session

Lead records

Until deletion is requested by workspace owner

Identified visitor data (Visitor ID)

24 months or until opt-out request

Technical logs

90 days

Workspace account data

Duration of account + 90 days after deletion

9. Data Security

We protect your data using:

  • TLS encryption for all data in transit

  • Encryption at rest for database storage (Supabase)

  • Role-based access controls — staff access is limited to what is necessary

  • Regular security reviews

No system is 100% secure. In the event of a data breach that affects your rights, we will notify affected parties as required by applicable law.

10. Children's Privacy

ClientX is a B2B platform intended for use by businesses. We do not knowingly collect personal data from individuals under the age of 16. If you believe a minor has submitted data through a ClientX-powered widget, contact us at privacy@clientx.in and we will delete it promptly.

11. Cookies and Local Storage

The ClientX widget stores a visitor session token in your browser's localStorage to maintain conversation continuity across page loads. This is a functional identifier only — it is not used for tracking, advertising, or cross-site profiling.

When Visitor ID is active, the RB2B script may also set cookies for the purpose of visitor identification. See Section 5 for opt-out options.

12. International Data Transfers

ClientX's servers are located in the United States. If you are visiting from the EEA, UK, or other regions with data transfer restrictions, your data may be transferred to and processed in the US. We rely on standard contractual clauses (SCCs) and other appropriate safeguards where required.

13. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify workspace owners by email. Continued use of the platform after changes constitutes acceptance.

14. Contact

For any privacy-related questions, data requests, or concerns:

Email: hey@continum.in
Company: Continum
Product: ClientX clientx.in