Privacy Policy
Last updated: July 7, 2026
What we collect
From you (the subscriber): your email, business name, WordPress site URL, billing details (handled by Stripe).
From your visitors: messages sent to the Salu widget, and — if they fill the lead form — name, email, phone. Conversation transcripts are logged for support and quality assurance.
What we do with it
Chat messages are sent to Anthropic's Claude API to generate the assistant's response. Anthropic's terms apply to that API call — they do not train foundation models on that traffic. Lead form submissions are emailed to you directly.
What we don't do
- We do not sell your data or your visitors' data to anyone.
- We do not train AI models on your conversations.
- We do not share visitor data with third-party ad networks.
Data location
Servers in the United States (Vercel + Anthropic). We can offer EU data residency on the Enterprise plan.
Retention
Conversation transcripts: 90 days by default, then deleted. Lead form submissions: emailed to you and NOT retained on our systems (V2 will offer opt-in retention for CRM sync).
Your rights (GDPR / CCPA)
You can request access to, correction of, or deletion of your data (or a visitor's data) by emailing privacy@salu.ai. We respond within 30 days.
Cookies
The Salu widget does NOT set any tracking cookies. It uses browser localStorage only for the visitor's conversation context (never shared with third parties).