Privacy, in plain English.
Chippy handles customer conversations so a trade business can answer, quote, schedule and manage work. This notice explains what is recorded, why it is needed, how long it is kept and the choices available to you.
Who is responsible
For a customer enquiry, the trade business named on the enquiry page or in the message is normally the data controller. Chippy processes the conversation on that business's instructions. For Chippy accounts, billing, product analytics and this website, Kian Wanner trading as Chippy is the controller. Privacy questions and rights requests can be sent to hello@askchippy.com.
If you need to send something by post or formally serve a notice, email that address and Chippy will provide the current correspondence details.
What Chippy records
- Names, contact details, addresses and job information supplied by customers or trade businesses.
- Complete text, email and hosted-enquiry conversations, including attachments and delivery status.
- Bookings, diary changes, quotes, approvals, payments and the operational audit trail.
- Agent decision records: the complete logical request for every model iteration, the exact request sent to the AI provider (without secret credentials), the provider's full response, token usage, resources consulted, tool actions and outcomes. Each Chippy answer to a customer is linked to the records that produced it.
- Account, sign-in, channel connection, security and support information.
- First-party website usage events only when a visitor allows analytics. Chippy does not use Google Analytics, Amplitude or advertising trackers.
Why it is used
Chippy uses this information to provide and secure the requested service, deliver messages, manage enquiries and bookings, support users, bill for the service, diagnose failures and improve reliability. The lawful bases are normally performance of a contract, legitimate interests in operating a safe and useful service, compliance with legal obligations, and consent for optional browser analytics.
Chippy uses AI to help draft and organise responses. The customer's message and the business or conversation context needed to answer it may be sent to Chippy's AI inference provider. Consequential actions are constrained by the trade business's approved rules, availability and approval settings. A customer can ask to speak to the trade business directly.
Who data is shared with
Data is available to the relevant trade business and its authorised team. Chippy also uses service providers for hosting and database storage, AI inference, email and text-message delivery, mapping and travel checks, and payments. Current integrations may include Cloudflare, OpenAI, Twilio, Resend, Google Maps and Stripe. They receive only what is needed for their role. Where personal data is processed outside the UK, Chippy uses an applicable adequacy decision or contractual safeguards.
Retention and account closure
While an account is open, operational records are kept for as long as needed to run and evidence the service. Closing an account immediately stops its automations, disconnects channels and revokes access. Its conversations, customer records, agent records and attachments are then restricted and deleted or anonymised three years after closure. This period supports complaints, dispute handling, abuse prevention and service integrity without keeping operational data indefinitely.
Optional browser analytics are removed after no more than 13 months. Minimal invoices, payments and tax records may be kept beyond the three-year operational period where HMRC, accounting, fraud prevention or legal-claims rules require it; those records are restricted to that purpose. Some information may be erased sooner where a valid legal right applies.
Security and incidents
Chippy uses business-scoped access controls, signed provider webhooks, idempotent writes, short-lived secure links, encrypted transport and an audit trail. No internet service can promise absolute security. Suspected security or privacy incidents should be reported to hello@askchippy.com.
Your rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict or receive your personal data, and to object to particular uses. You can withdraw browser-analytics consent at any time. For a job enquiry, contact the trade business first; Chippy will assist it with the request. You can also complain to the UK Information Commissioner's Office.
Your right to object: you may object to processing based on legitimate interests. Tell the trade business or email Chippy and explain which use concerns you.