This Policy explains what personal data the Findlee service processes, for what purpose, on what legal basis, and what rights every person whose data we process has.
1. Who we are
The Findlee service (the "Service", "we") operates on the domain findlee.com.ua. Owner: Sole proprietor [full name], tax number [number], single-tax payer of the third group, Ukraine. Contact for personal data matters: welcome@nextdoorcoders.com.
2. Two roles: us and our clients
Findlee is a B2B service. We provide online stores with an AI assistant that embeds into their site. Data is therefore processed in two distinct modes:
-
Store owner data (our client) — here we are the controller. This covers registration details, settings and billing history.
-
Store visitor data — here the store itself is the controller and we act as a processor: we process this data only on the store's instructions and only as far as the assistant needs. The store is obliged to have a lawful basis for such processing and to inform its visitors of it in its own privacy policy.
3. What data we process
From the store owner:
- name, email address, password in encrypted form;
- store domain, product feed URL, widget settings;
- access keys to third-party AI providers that you add yourself — stored in closed form and used only for your requests;
- plan, payments and access period data;
- technical logs: IP address, request time, errors.
From the store visitor (through the widget):
- the text of chat messages and the assistant's replies;
- an anonymised session and visitor identifier;
- images, if the visitor sends a photo to search for a product;
- product views and clicks within the conversation;
- the link between a click and an order, if the store has enabled conversion tracking;
- technical data: IP address, browser type, the page address the chat was opened from.
We do not ask store visitors for their name, phone number, address or payment details, and the assistant does not need them. If a visitor types such data into the chat of their own accord, it ends up in the message text — so we advise against it.
4. Why we process it and on what basis
- Providing the service — performance of the contract with the store.
- Assistant replies — on the instructions of the store as data controller.
- Limits, abuse protection, security — our legitimate interest.
- Statistics and improving answer quality — legitimate interest; analytics uses anonymised or aggregated data.
- Legal compliance — accounting and tax obligations.
5. Who data is shared with
We do not sell data and do not pass it to third parties for their marketing. Only the suppliers the service cannot run without receive data:
- AI model providers — OpenAI and Google (Gemini). They receive the request text and the context needed to compose a reply. Processing takes place on their servers, including outside Ukraine and the EU.
- Hosting provider — the company whose servers host the Service. We disclose its name and location on request.
- Bank — payment is accepted solely by bank transfer against an invoice. We do not accept payment cards, so we never see or store card details.
- Government authorities — only on a written lawful request.
6. How long we keep it
- Conversation history — 12 months, then deleted or anonymised.
- Account data — for the whole term of the contract and 12 months after it ends.
- Technical logs — up to 12 months.
- Accounting records — for the periods set by law.
A store can delete its conversation history at any time from its dashboard.
7. What is stored in the visitor's browser
The widget uses no advertising or tracking cookies. Only technical records are kept in the browser's local storage: the chat session identifier, the current conversation history, interface flags and — if the store has enabled conversion tracking — a short list of viewed products. These records can be cleared from the browser and the service will keep working.
8. Your rights regarding your data
You have the right to:
- find out what data about you is processed and obtain a copy of it;
- demand correction of inaccurate data;
- demand deletion of data;
- restrict processing or object to it;
- withdraw consent, where processing is based on consent;
- lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or with the supervisory authority of your country.
Send requests to welcome@nextdoorcoders.com. We reply within 30 days. If the request concerns data collected through a particular store's widget, we will forward it to that store as the data controller.
9. Security
Only authorised staff have access to data. Connections are protected by TLS, passwords are stored as irreversible hashes, and AI provider keys are kept in closed form and never shown in full in the interface. No measure gives an absolute guarantee, so we cannot promise unconditional security of data transmission over the internet.
10. Children
The Service is not intended for persons under 14 and does not knowingly collect their data.
11. Changes
We may update this Policy. The version date is shown at the top. We notify clients of material changes by email or in the dashboard no later than 14 days before they take effect.
These Terms are a contract between you and Findlee. By using the service you agree to them. If you do not agree — do not use the service.
1. Definitions
- Service — the Findlee software: the dashboard, the AI agents and the site widget.
- Client — a legal entity or sole proprietor that has entered into a contract and uses the Service.
- Visitor — a user of the Client's site who interacts with the widget.
- Plan — the set of available features and limits chosen by the Client.
2. What we provide
We provide access to the Service on a SaaS model: the software is hosted on our infrastructure and the Client receives the right to use it for the term of the paid period. Exclusive property rights to the Service remain with us.
3. Registration and access
- The Client is responsible for keeping their login and password safe and for all actions taken under their account.
- The Client must notify us immediately of any unauthorised access.
- We may temporarily restrict access for scheduled maintenance, giving advance notice where possible.
4. Plans and payment
- The price and contents of the plans are stated on the site or in the invoice.
- Access is granted after the relevant period has been paid for.
- Payment is made by bank transfer against an issued invoice. There is no automatic charging: each period is paid by a separate invoice.
- The provider is a sole proprietor on the simplified tax system (third group) and is not a VAT payer.
- We may change prices with at least 30 days' notice before a new period begins; changes do not apply to an already paid period.
- Refunds: on the Client's written request we refund the amount for whole unused months of the paid period. The fee for the current (started) month is not refunded.
- Once the paid period ends, access is restricted; data is kept for 30 days and may be deleted thereafter.
5. AI provider keys and costs
The agents need an access key to an AI provider in order to work. If the Client uses their own key, the Client bears all costs of requests to the provider directly and independently. The Client sets daily spending limits themselves in the dashboard. We are not responsible for amounts charged by the provider, nor for changes to its pricing or terms.
6. Client obligations
- Hold lawful rights to the product content passed into the Service.
- Not use the Service for goods or services whose circulation is restricted or prohibited by law.
- Publish their own privacy policy and inform Visitors about the chat assistant and the transfer of messages to the AI provider.
- Not attempt to access other people's accounts, not overload the service with automated requests, and not probe it for vulnerabilities without our written consent.
- Not use the Service for bulk messaging, deception, or collecting sensitive data from Visitors.
7. The nature of AI answers — important
Answers are produced by a language model based on the Client's catalogue and knowledge base. Such answers may contain inaccuracies. They are informational and are not professional advice — legal, medical, veterinary, financial or otherwise.
The Client is responsible for the content of the catalogue and knowledge base, and for decisions made on the basis of the assistant's answers. We recommend keeping the "may make mistakes" notice that the widget shows under the input field switched on.
8. Service availability
We make reasonable efforts to keep the service running, but do not guarantee operation free of interruptions and errors. The Service depends on third-party suppliers (AI providers, hosting), and their outages, limits or changes of terms may affect availability. No separate guaranteed availability level (SLA) is established; if needed, one may be agreed separately in writing.
9. Limitation of liability
To the extent permitted by law, we are not liable for lost profit, data loss, reputational or indirect damages. Our aggregate liability is limited to the amount actually paid by the Client for the three months preceding the event.
10. Intellectual property
The Service, its code, interfaces, name and logo belong to us. The Client's content (catalogue, knowledge base, settings) remains the Client's property; the Client grants us the right to use it solely to provide the Service.
11. Termination
- The Client may stop using the Service at any time by notifying us.
- We may suspend or terminate access in the event of a breach of these Terms, non-payment, or actions that threaten the Service or other clients — with notice where possible.
- After termination the Client may retrieve their data within 30 days.
12. Force majeure
The parties are not liable for failure to perform obligations caused by force majeure, including military action, power and communications outages, and large-scale failures of provider infrastructure.
13. Governing law and disputes
These Terms are governed by the law of Ukraine. Disputes are settled through negotiation and, failing agreement, in the courts of Ukraine at the provider's location.
14. Changes to the Terms
We may change these Terms with at least 14 days' notice. Continuing to use the Service after the changes take effect means you accept them.
15. Contact
Sole proprietor [full name], tax number [number], Ukraine. Email for enquiries: welcome@nextdoorcoders.com.